FEDERALItem 1.05 · mandatoryMalwareProfessional ServicesEnergy & UtilitiesProfessional ServicesEngineering ServicesRansomwareData EncryptedLowActive

ENGLOBAL CORPORATION

bd_0f5202220a421679 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 25, 2024

Filed

Dec 2, 2024

To disclose

7 days

Affected

Not disclosed

Linked

3 filings

Confidence

86%

Full breach record for ENGLOBAL CORPORATION →

On November 25, 2024, ENGlobal Corporation became aware of a cybersecurity incident in which a threat actor illegally accessed the Company's IT systems and encrypted some data files. The Company contained the incident, began an internal investigation, engaged external cybersecurity specialists, and restricted IT system access to essential business operations. Investigation and remediation remain ongoing; materiality to financial condition undetermined as of filing.

J jump to incidentP pin to compareR raw source

SEC clockMateriality determined Nov 25, 2024 → Filed Dec 2, 20247d ✓ SEC 4-day OK7 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 7 days

Nov 25, 2024

Discovered

Dec 2, 2024

Filed

vs. sector median

18 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

SEC 8-Kbd_9c531324d83f82c52025-01-27 · +56dVerified
Nebraska State AGbd_a78ae2e90fc8fa2a2025-02-03 · +63dCandidate

Name: ENGLOBAL CORPORATION
norm: englobal
SEC CIK: 0000933738
Domain: englobal.com

Name: ENGLOBAL CORPORATION
norm: englobal
SEC CIK: 0000933738
Domain: englobal.com
Industry: Professional ServicesllmEnergy & Utilitiesllm
NAICS 541330 · Engineering Services

Discovered: Nov 25, 2024
Materiality determined: Nov 25, 2024
Notification sent: —
Affected individuals: Not disclosed
Data types: —
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External
Regulator citations: Filed Form 8-K Item 1.05 with the SEC

During the incident: Began an internal investigation
Engaged external cybersecurity specialists
Restricted access to its IT system
Took steps to contain, assess and remediate the cybersecurity incident
Changes made: Limited access to the Company's IT system to essential business operations
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 days(7 days from discovery to filing)
Compliance flags: SEC 4-day OK · 7d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
SEC
Materiality determined: Nov 25, 2024
→ Filed: Dec 2, 2024
7d cal. 4 business days SEC 4-day OK

Statute	Window	Elapsed	Threshold	Status
SEC	Materiality determined: Nov 25, 2024 → Filed: Dec 2, 2024	7d cal.	4 business days	SEC 4-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings

View merged incident ↗

SEC 8-KDec 2 · first · this page

SEC 8-K+56d

Nebraska State AG+63d

Pattern: first filing Dec 2, last Feb 3 (NE) — a 63-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/933738/000165495424015098/eng_8k.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Dec 2, 2024
Raw hash: 115fa0326b2e35d99ceb0c842c5e844ca34c804f966e4f58b2e1032166eea497

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html27.0 KB

Download View at source

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityENGLOBAL CORPORATION

Victim entityENGLOBAL CORPORATION

Incidentdiscovered Nov 25, 2024

Stated responseBegan an internal investigation

ComplianceSEC 4-day OK

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing