Toyota Shutdown Over Cyberattack at a Supplier Reflects Cautious Culture
Motor Corp.’s Japan factories were set to reopen Wednesday morning after a one-day shutdown that reflected the company’s culture of caution.
At Toyota factories, any worker who spots a potential problem generally has the power to bring the entire line to a halt. The idea is that less time is ultimately wasted by stopping work to fix the problem right away.
The company applied that practice dating to the 20th century when it was hit this week with a 21st-century problem—a cyberattack that paralyzed one of its suppliers. Plastic-parts maker Kojima Industries Corp. said it realized early Monday evening that it couldn’t operate as usual on Tuesday, and it quickly relayed that news to its main customer, Toyota.
So Toyota hit the stop button for a whole day. Its 14 factories in Japan didn’t build any cars Tuesday.
“It’s better to stop and figure out what the problem is, rather than to continue working while worrying that something might go wrong,” said a Toyota spokesman.
The company said production would resume Wednesday. The daylong shutdown was the latest woe for Toyota after problems with semiconductor supplies.
In recent years, Toyota President
has given speeches and held training sessions to spread the philosophy of Toyota’s production system beyond the factory floor. Subordinates have applied the factory principle of avoiding “muda,” or waste, to economizing on office supplies.
Kojima is one of the more than 1,000 suppliers in the Toyota empire that play a role in keeping production lines running smoothly.
The parts maker said it noticed problems with its servers at around 9 p.m. Saturday, forcing a restart. After the system was restarted, Kojima said it discovered a computer virus and received a threatening message. That can be a hallmark of a ransomware attack in which criminals seek payment in return for restoring a computer system to normal.
A Kojima spokesman said the company at this point isn’t using the word ransomware and continues to examine what happened. It said it was working with local police to counter the attack.
After calling in outside security experts and shutting off all its systems, Kojima struggled to restore normal functioning and on Monday realized it couldn’t properly exchange information with Toyota about supplying parts, Kojima said. While the car maker has eased away from some elements of its “just-in-time” production system in recent years, it still often counts on suppliers to deliver just enough product each day.
Factories are set to operate the rest of the week with a trimmed-down version of Toyota’s parts-ordering system, the Toyota spokesman said. Normally, the system monitors in real time how much of a particular part gets used so suppliers can fine-tune their deliveries. It will go without that function for now, the spokesman said, with full restoration set for next week.
Cyberattacks on manufacturing companies, particularly those involving ransomware, have exploded in the past year, according to a February report by International Business Machines Corp. Manufacturing overtook financial services and insurance as the biggest target of ransomware attacks in 2021,
In May 2021, Toyota Auto Body Co., a Toyota Motor subsidiary, and Toyota affiliate
Daihatsu Diesel Mfg. Co.
were hit by cyberattacks.
Toyota said it had information-security policies that it requires all its suppliers to follow. The company said it reminded suppliers of those policies after the Kojima attack.
Write to Sean McLain at [email protected]
Copyright ©2022 Dow Jones & Company, Inc. All Rights Reserved. 87990cbe856818d5eddac44c7b1cdeb8
For all the latest Technology News Click Here