Toyota: a hack at one plastic-parts supplier halted all 14 Japan plants for a day

On Feb. 28, 2022, Toyota announced it would 'suspend the operation of 28 lines at all 14 domestic plants' the next day, citing 'a system failure at a supplier in Japan.' The company's spokesman said the one-day stoppage would affect production of about 13,000 vehicles - roughly 5% of monthly output at home.

The supplier was Kojima Industries, a maker of plastic parts, which Japan's Nikkei reported had come under a suspected cyberattack; Toyota declined to confirm at the time. Security specialists told Reuters the incident showed how one vulnerable small firm can halt the world's largest automaker, and it landed while Toyota was already cutting production targets amid the global chip shortage.

The shutdown exposed the trade-off inside Toyota's hallmark just-in-time system: with inventories deliberately kept thin, there was no buffer to absorb even a single supplier going dark. Toyota restarted the plants after a full day down, and the episode entered a series of supplier shocks - alongside the 2016 Aichi Steel explosion - that analysts at Asahi Shimbun later cited as evidence the lean system's vulnerability was predictable and repeatable.

All 28 lines at 14 domestic plants idle for a day; production of about 13,000 vehicles lost, roughly 5% of that month's Japan output

Just-in-time production keeps almost no part buffers, so when one supplier's systems died, assembly had nothing to draw on and every line stopped at once.

The blast radius came from the smallest party in the chain: a plastic-parts vendor, not a tier-one giant, was enough to idle the world's top carmaker.

Toyota's own reliance mapping left it exposed - Asahi's later reporting on similar shocks noted there were 'hardly any alternative suppliers' for critical single-sourced components.

The incident struck while chip shortages had already stretched Toyota's production planning, removing any slack that might have absorbed the hit.

Just-in-time works only while every link is secure. Your smallest supplier's security is your production line - audit the weakest node before it audits you.

Toyota brought all 14 plants back after the single lost day and asked its supplier network to inspect their facilities for weaknesses. The company pledged steps to prevent future shutdowns, but Asahi Shimbun's 2023 reporting on the Chuo Spring explosion - which idled 13 lines at eight plants for about ten days - argued the just-in-time vulnerability remained, with Toyota executives conceding there were hardly any alternative suppliers for essential parts. The Kojima attack became a standard citation in supply-chain cyber-risk research.