NEC says a company it uses for development and maintenance was hacked in late September. Its legitimate accounts, used from its own PCs, reached NEC customers' servers and encrypted them. Osaka Metropolitan University's 500 servers were among them. A shared project cloud folder leaked too.
NEC's supplier program is one of the best documented in Japan. Audits show who has controls; they don't stop a valid account on a trusted device.
https://japancyberwatch.com/articles/nec-contractor-compromise-customer-systems-encrypted-2026