The Splash

Regarding Security Incident at Kurita America Incorporated

Kurita America Inc. (headquarters: Minnesota, United States (“KAI”)), a consolidated subsidiary in North America of Kurita Water Industries Ltd. (headquarters: Nakano-ku, Tokyo) found evidence of unauthorized access of certain of its servers. We deeply apologize to our customers and business partners for any concern or inconvenience this may cause.

The following are details known at this stage:

  1. What happened: On the afternoon of Friday, November 29, 2024, an alert was detected by KAI’s security monitoring system. We immediately began investigating the matter and brought in an external forensics investigation firm. It was determined that the data on certain of our servers had been encrypted. We promptly disconnected the compromised servers to prevent any further spread of infection.
  2. Data that may have been accessed: One affected server contained data relating to KAI’s customers, business partners, business contact information, purchase information, and other proprietary content, and this data may have been accessed.
  3. Next steps: KAI’s main servers and data have already been restored and business operations have not been disrupted. We and our forensics firm are continuing to actively investigate the incident and we are taking steps to prevent a recurrence.   

Safeguarding your information is one of our top priorities, and we are actively conducting a thorough review of both our security protocols and technologies to prevent similar occurrences in the future and limit threats that may put any of your data at risk.

If you receive any emails (even if it appears to be from a KAI email address) requesting payment of our invoices and the banking information is NOT what you already have for KAI in your files (i.e., the email provides different banking information) we strongly recommend you do not send any funds as that email requests. Rather, please call our accounting department at the phone number you already have for us, not the one in that email. This will hopefully avoid your sending funds to a fraudulent account.