Underground ransomware claims attack on Casio, leaks stolen data

The report describes a claimed October 5 ransomware incident in which the Underground gang allegedly breached Casio, caused system disruptions, and published purportedly stolen confidential documents, employee data, payrolls, patents and financial records on its extortion portal; the write-up also summarizes Fortinet findings on Underground’s tactics (Office CVE exploitation, registry persistence, stopping MS SQL, deleting shadow copies) and notes the actor’s links to RomCom, while emphasizing the Casio breach and leak remain unverified.