NTN Bearing Corp. Hit by Ransomware Attack, 596GB of Data Stolen
NTN Bearing Corp. of America, a U.S. subsidiary of Japanese multinational NTN Corp., disclosed a data breach that occurred on April 15, 2026. The company, headquartered in Schaumburg, Illinois, serves original equipment manufacturers and aftermarket customers through manufacturing plants, sales offices, and research facilities across the U.S.
The ransomware group Payouts King claimed responsibility for the attack, posting a notice on a dark web site hosted on the Tor network on May 13, 2026. The group alleged it exfiltrated 596 gigabytes of data, threatening to publish the stolen information within five to six days. The compromised dataset reportedly included employees' personally identifiable information (PII), financial records, confidential business documents, internal correspondence, and engineering files though these claims have not been publicly verified.
NTN Bearing reported the breach to the Indiana Attorney General on June 22, 2026. The company has begun notifying affected individuals, with breach notification letters expected to detail the exposed data types and any offered protective services. The full scope and impact of the breach remain under investigation.
Source: https://www.claimdepot.com/data-breach/ntn-bearings-2026
NTN Bearing Corporation cybersecurity rating report: https://www.rankiteo.com/company/ntn-bearing-corporation
"id": "NTN1783355898",
"linkid": "ntn-bearing-corporation",
"type": "Ransomware",
"date": "4/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Manufacturing',
'location': 'Schaumburg, Illinois, USA',
'name': 'NTN Bearing Corp. of America',
'type': 'Subsidiary'}],
'customer_advisories': 'Breach notification letters to affected individuals',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Financial records',
'Confidential business documents',
'Internal correspondence',
'Engineering files']},
'date_detected': '2026-04-15',
'date_publicly_disclosed': '2026-05-13',
'description': 'NTN Bearing Corp. of America, a U.S. subsidiary of Japanese '
'multinational NTN Corp., disclosed a data breach that '
'occurred on April 15, 2026. The ransomware group Payouts King '
'claimed responsibility, alleging the exfiltration of 596GB of '
"data, including employees' PII, financial records, "
'confidential business documents, internal correspondence, and '
'engineering files. The breach was reported to the Indiana '
'Attorney General on June 22, 2026, and the company is '
'notifying affected individuals.',
'impact': {'data_compromised': '596GB', 'identity_theft_risk': 'High'},
'investigation_status': 'Ongoing',
'ransomware': {'data_exfiltration': 'Yes'},
'references': [{'date_accessed': '2026-05-13',
'source': 'Dark web site (Tor network)'}],
'regulatory_compliance': {'regulatory_notifications': ['Reported to Indiana '
'Attorney General on '
'June 22, 2026']},
'response': {'communication_strategy': 'Breach notification letters to '
'affected individuals'},
'threat_actor': 'Payouts King',
'title': 'NTN Bearing Corp. Hit by Ransomware Attack, 596GB of Data Stolen',
'type': 'Ransomware'}