Analog Devices disclosed a data breach to the U.S. Securities and Exchange Commission after finding unauthorized access to some company systems and evidence that files had been taken. The Massachusetts chipmaker said in a Wednesday SEC filing that it does not currently expect the incident to materially affect its business.
The company said it detected the intrusion on June 23 and began its incident response process. Analog Devices told regulators it hired outside cybersecurity specialists and started working with law enforcement.
During the investigation, the company found that “certain files” had been exfiltrated. Analog Devices said it has not yet determined the full scope of the breach. File exfiltration means data was copied out of an environment controlled by the victim, which can matter even when attackers do not encrypt systems or publicly leak the material.
What did Analog Devices disclose about the data breach?
Analog Devices told the SEC that attackers gained unauthorized access to some systems, that files were removed, and that the investigation is continuing. The company said that, to its knowledge, the data has not been made public or used for fraud.
The filing also mentioned a separate cyber matter reported to Analog Devices on July 26. The company described that matter as “disparate” from the June intrusion and said it is reviewing whether the claim is valid, how broad it may be, and whether it could have any impact.
Analog Devices did not give regulators more detail about the July report. The timing may line up with claims posted by the ransomware group ExfilSquad, which alleged that it stole more than 570,000 records tied to Analog Devices customers. The company’s spokesperson did not address questions about those ransomware claims.
That leaves two confirmed points and one unverified allegation. The confirmed points are the June intrusion and the theft of some files, both disclosed by Analog Devices to the SEC. The unverified allegation is ExfilSquad’s claim about customer records, which the company has not confirmed.
Why semiconductor companies keep showing up in breach reports
Analog Devices is a major supplier in the chip industry. The company has a market value above $178 billion and reported more than $11 billion in revenue last year. Its products include chips and circuits used for data conversion and signal processing, areas that sit close to the industrial and computing systems now being built out at speed.
Semiconductor companies have been frequent targets for both ransomware crews and state-linked espionage operators in recent years, according to public incident reports. The sector holds intellectual property, customer data, supplier information and production systems, which gives attackers several ways to cause damage or apply pressure.
Other chip and electronics companies have reported incidents recently:
- Microchip Technology was attacked by the Play ransomware gang in 2024.
- Applied Materials was affected by a 2023 ransomware incident tied to supplier MKS Instruments.
- Trio-Tech International reported a ransomware attack on its Singapore subsidiary in March.
- Foxconn confirmed a cyberattack in May that affected production at several U.S. factories.
Analog Devices’ filing does not say who was behind the June intrusion, how the attackers got in, what kinds of files were taken, or whether customer, employee or partner data was included. For now, the public record is narrower than the ransomware forum chatter, which is usually the right order in breach reporting.
This story draws on original reporting from The Record.
