Kubota North America has begun notifying employees and offering identity protection services after discovering that hackers accessed files containing sensitive human resources information during a cybersecurity incident.
According to a notice posted on the company’s website, unauthorized access to certain Kubota network systems occurred between March 16 and April 20, 2026.
“We identified and addressed an incident involving unauthorized access to certain network systems between March 16, 2026 and April 20, 2026,” Kubota said in its notice.
The company said it secured its network after learning of the incident and launched an investigation to determine what happened. On April 30, investigators determined that files maintained by Kubota’s human resources team had been accessed. Following a review of those files, the company concluded on June 16 that they “may have contained personal information related to certain employees and their dependents.”
The potentially exposed information varied by individual but may have included names combined with Social Security numbers, dates of birth, taxpayer identification numbers, driver’s license or other government-issued identification numbers, direct deposit banking information, corporate payment card information, and benefits enrollment and limited claims information. Similar information may also have been exposed for employees’ dependents enrolled in company benefits.
Kubota said notification letters were mailed to affected individuals on June 30.
“We mailed letters to the affected individuals on June 30, 2026, and arranged for all affected individuals to receive a complimentary membership to identity monitoring services through Kroll,” the company said.
Kubota also established a toll-free call center for affected individuals and said it has taken steps to strengthen its cybersecurity.
“We take the privacy and confidentiality of our employees’ information very seriously,” the company said. “To help prevent something like this from happening again, we have taken and will continue to take steps to further enhance our existing security measures.”
Kubota did not disclose how many employees or dependents were affected.
The Japanese manufacturer is one of the world’s largest producers of agricultural and construction equipment. Its North American operations manufacture tractors, utility vehicles, mowers, and other equipment used throughout the agriculture industry.
Cybersecurity news outlets, including BleepingComputer, reported that no ransomware or data extortion group had claimed responsibility for the incident as of July 1, and Kubota had not reported any operational or business disruptions related to the breach. BleepingComputer also reported that it contacted Kubota for additional details but had not received a response before publication.