Summary
Advantest, a Japanese manufacturer of semiconductor test equipment and one of the world’s largest suppliers of testing systems for logic and memory chips, has confirmed that personal information was stolen in a ransomware attack. Advantest’s test equipment is used in the manufacturing process for semiconductors produced by major chipmakers including TSMC, Samsung, and SK Hynix. The breach of a company with Advantest’s supply chain position raises concerns beyond the immediate personal data exposure, given the sensitivity of semiconductor manufacturing process data and customer technical specifications that may be present in Advantest’s systems.
Timeline
| Date | Event |
|---|---|
| October 2026 | Ransomware attack on Advantest systems; personal information stolen |
| Oct 7, 2026 | Advantest publicly confirms personal information theft; BleepingComputer reports |
What Happened
Advantest holds a critical position in the global semiconductor supply chain. Its automated test equipment (ATE) systems are used at the final stage of semiconductor manufacturing to verify that chips meet performance and quality specifications before shipping. As a result, Advantest maintains technical relationships with virtually every major semiconductor manufacturer, and its systems may contain customer-specific test programs, yield data, and manufacturing process parameters that represent significant intellectual property.
The confirmation that personal information was stolen is the publicly disclosed element of the breach. The full scope of what was accessed — including whether any semiconductor customer technical data was exfiltrated — has not been disclosed. Ransomware groups targeting industrial and manufacturing companies increasingly exfiltrate data before deploying encryption, using the threat of publishing stolen data as additional leverage. The ransomware group responsible has not been publicly named.
Domain Intelligence
advantest.com — 60.34
advantest.com scores in the low-trust range at 60.34. Advantest is the victim organization whose systems were breached in the ransomware attack.