Analog Devices Reveals June Cyberattack, Files Stolen

Analog Devices disclosed in a U.S. Securities and Exchange Commission filing that it detected unauthorized access to certain systems on June 23. The company engaged outside security experts who concluded that files were taken. Analog Devices reported the incident did not disrupt production or customer deliveries and that it has not seen evidence the stolen files have been published or used for malicious purposes.

The Massachusetts-based chip maker employs about 24,000 people and reported roughly $12 billion in annual revenue. It designs and manufactures analog, mixed-signal and digital signal processing chips used in industrial equipment, automotive systems and communications gear.

The filing says the company has been working to contain the incident and to assess what information was compromised. Analog Devices is continuing the investigation with external specialists and will update investors if it finds information that could affect its business, operations or financial results.

Analog Devices indicated the breach is not expected to have a material impact on its business, operations or financial condition. The company noted that production and customer deliveries were not affected by the event.

The SEC filing also referenced a separate matter that became public on July 26 and is under review for validity and scope. Security researchers and analysts have linked that reference to claims by an extortion group calling itself ExfilSquad, which says it obtained 570,000 records from the company. ExfilSquad focuses on data theft and typically posts alleged victims and stolen material on an online leak site; it does not appear to use file-encrypting ransomware.

Analog Devices has not disclosed whether the files stolen in the June incident are connected to the separate public claims. The company said it has no evidence so far that stolen files have been published or used improperly and continues to assess the situation with outside advisers.

The disclosure follows a pattern of public companies notifying investors about cybersecurity incidents through SEC filings. Analog Devices provided limited detail while its review continues and said it will inform stakeholders of any new findings that could affect its operations or financial statements.