---
title: "Toyota Suspends Production at 14 Plants Following Possible Cyber Attack"
description: "Toyota has suspended production at 14 of its domestic plants following a potential cyber attack on one of its vendors."
date: "2022-02-28"
modified: "2022-02-28"
authors:
  - name: "Rob Stumpf"
    job_title: "Contributor"
    link: "https://www.thedrive.com/authors/rob-stumpf"
url: "https://www.thedrive.com/news/44485/toyota-suspends-production-at-14-plants-following-possible-cyber-attack"
categories:
  - "Car Tech"
  - "Manufacturing"
  - "News"
  - "News by Brand"
  - "Toyota News"
tags:
  - "Toyota"
---

# Toyota Suspends Production at 14 Plants Following Possible Cyber Attack

![](<https://www.thedrive.com/wp-content/uploads/images-by-url-td/content/2022/02/GettyImages-458719781.jpg>)
*\<em\>www.thedrive.com</em>*

A "system failure" at one of its domestic suppliers early Tuesday, likely due to a cyber attack, has caused Toyota to suspend production at 14 of its plants, the automaker [announced](<https://global.toyota/en/newsroom/corporate/36961051.html>) via a statement.

Though the automaker's official statement makes no mention of one, [*Nikkei*](<https://asia.nikkei.com/Spotlight/Supply-Chain/Toyota-halts-operations-at-all-Japan-plants-due-to-cyberattack>) reports that one of Toyota's Tier 1 suppliers, Kojima Industries, seems to have been the target of a cyber attack. "It is true that we have been hit by some kind of cyber attack," the outlet cited an unnamed source close to the matter as saying. "We are still confirming the damage and we are hurrying to respond, with the top priority of resuming Toyota's production system as soon as possible."

A total of 28 production lines will be paused due to the failure, which affects vehicles across the Toyota, Daihatsu, and Hino brands, according to *Nikkei*.

In an emailed statement to *The Drive*, a Toyota spokesperson estimated that the production suspension will impact 13,000 vehicles in Japan, but also noted that the company believes there will be no impact on North American production at this time. It's unclear if Toyota will resume production on Wednesday, as the spokesperson declined to answer this particular question.

![message-editor%2F1646075809529-toyota2.jpg](<https://www.thedrive.com/wp-content/uploads/content-b/message-editor/1646075809529-toyota2.jpg>)
*Toyota's Motomachi assembly line, *via Toyota**

Toyota has roughly 400 Tier 1 suppliers which are responsible for producing modules and components—or in Kojima's case—plastic parts for vehicle interiors. These suppliers are often directly connected to Toyota's internal networks as part of its just-in-time production methodology, meaning that if proper safeguards aren't in place, an incident could spill over into Toyota's environment, hence the cautionary pause while Toyota officials and [cyber security experts](<https://www.twz.com/41243/the-national-guard-just-simulated-a-cyberattack-that-brought-down-utilities-nationwide>) evaluate the scope of the situation. Kojima Industries is currently performing root cause analysis and determining how it will restore services.

News of supposed Kojima's breach comes around the same time that Japanese tire manufacturer Bridgestone became [aware of its own cyber security-related incident](<https://portswigger.net/daily-swig/bridgestone-americas-disconnects-manufacturing-facilities-following-security-incident>) on Sunday. Similar to Toyota, Bridgestone "disconnected" its American manufacturing and retreading facilities until it could learn the full scope of the incident. This morning, Bridgestone announced that it was [canceling a shift at its plant in Des Moines, Iowa](<https://www.desmoinesregister.com/story/money/business/2022/02/28/bridgestone-tire-factory-des-moines-cancels-shifts-amid-cyberattack/6972256001/>), which employs about 1,300 workers.

![message-editor%2F1646075731223-toyota1.jpg](<https://www.thedrive.com/wp-content/uploads/content-b/message-editor/1646075731223-toyota1.jpg>)
*Workers at Toyota's plant in Takaoka., *via Toyota**

It's not immediately clear if there is any connection between the Toyota and Bridgestone incident, however, both incidents follow Japanese Prime Minister Fumio Kishida's support for blocking Russia from the international payment system, SWIFT, as well as an emergency monetary aid pledge of $100 million for Ukraine.

In a press conference, Kishida said that the Japanese government was investigating the Kojima Industries incident to determine if there was any involvement from Russia, a well-known perpetrator of state-sponsored cyber attacks. In 2021, Microsoft [reported](<https://www.microsoft.com/en-us/security/business/security-intelligence-report>) that Russia was indicated in 58 percent of all [state-sponsored cyber attacks](<https://www.twz.com/44066/cyberattack-targets-belarus-rail-network-to-slow-flood-of-russian-forces-into-the-country>) detected by its threat analysis teams in the prior year.

*Got a tip or question for the author? You can reach them here: Rob@thedrive.com.*

## Author
After putting down the camera and leaving the tuner car scene behind, Rob has been covering the automotive world since early 2017. Rob’s blend of technology and automotive backgrounds coupled with his industry insight give a unique perspective of what the future of mobility holds.

### Author social links  
[Instagram](<https://www.instagram.com/allthingslow/>)  
[Twitter](<https://twitter.com/RobDrivesCars>)