Japanese lens maker Hoya Corporation said it experienced a significant cyber security incident that forced it to take several of its production units offline.

The Tokyo-based company, which ranks among the world’s largest manufacturers of lenses and other optical gear, said that it detected suspicious activity in the internal network of one of its overseas facilities on March 30 and immediately launched an investigation to determine the scope of the incident.

Hoya said it isolated the failed servers from the larger network and reported the matter to the relevant authorities in the affected countries. External cyber security experts who assisted the company’s investigation determined that the incident was most likely caused by unauthorised access to the Hoya’s servers by a third party.

“While the full effects, extent and nature of the incident continue to be investigated, the systems for some production plants and the ordering system for several products have been affected. The Company is making every effort to respond to customer demand and minimize the impact on our customers to the greatest extent possible.

“We are also investigating whether any confidential or personal information held by the Company has been compromised or accessed by third parties, but the full analysis is expected to take a considerable number of days,” the company said.

“We will continue to investigate and analyse the impact of this incident in cooperation with outside experts and relevant authorities, and will take measures to restore the systems necessary for production and sales activities and to resume the supply system of products to customers as soon as possible,” it added.

Hoya is also assessing the situation for any material impact on its business performance and assured its customers that it will share more information about the incident as and when available. Hoya’s consumer eyeglass lens unit, Hoya Vision Care Co, apologised to customers on Tuesday for pausing order bookings for lenses due to a group-wide system failure.

In 2019, Hoya suffered a data security incident that involved threat actors targeting a production facility in Thailand. This forced the company to take its production plant offline for three days. In 2021, the company suffered another cyber attack that affected its US systems.

A group of threat actors, going by the name Astro Team gang, claimed responsibility for the 2021 cyber attack on Hoya and listed the company as a victim on its dark web site. The group said that it stole around 300GB of data from the company, including data on finance, production, email and passwords, safety reports, clients’ data and more.