Kubota suffers cyber security breach affecting North American division

Japanese industrial manufacturer Kubota reported that it suffered a major data security incident earlier this year, disrupting the routine operations of its North American division.

 

Kubota is a Japan-based industrial manufacturer specialising in agricultural machinery, construction equipment, engines, and industrial products. The company has a significant presence in North America through its regional operations, which support customers across the U.S. and Canada.

 

In a data security incident notice filed with the Office of California Attorney General, Kubota North America said that it discovered unauthorised access to its internal network, which occurred between March 16 and April 20. The company immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

It also took steps to secure the affected systems and notified relevant law enforcement authorities about the incident.

 

“We recently identified and addressed an incident involving unauthorised access to certain network systems between March 16, 2026, and April 20, 2026. When we learned of the incident, we immediately took steps to secure our network. 

 

“On April 30, 2026, we discovered that files maintained by our human resources team were accessed as part of this incident,” Kubota NA said.

 

The compromised data included names, Social Security numbers, dates of birth, taxpayer identification numbers, driver’s license or other government-issued identification numbers, financial account information for direct deposits, payment card information for corporate cards and more. The company, however, did not disclose the number of affected individuals.

 

“To help prevent a similar incident from occurring in the future, we implemented additional measures to enhance the security of our computer network,” Kubota NA added.

 

The company has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and the state attorney general.  

 

It has also offered complimentary identity protection and credit monitoring services through Kroll to all affected individuals.

 

At the time of publishing, no known hacker group claimed responsibility for the  cyber attack on Kubota NA. The insurance provider also did not share details on who was behind the attack, how much data was compromised, or whether it had received a ransom demand.