HackingTechnologyInformationCustomer Data InvolvedEmployee Data InvolvedPIIIdentity (basic)LowContained

KULICKE AND SOFFA INDUSTRIES, INC.

bd_4721655bb05898a2 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 12, 2024

Filed

Jul 9, 2024

To disclose

8 weeks

Affected · nationwide

9491 in this filing

Linked

9 filings

Confidence

66%

Full breach record for KULICKE AND SOFFA INDUSTRIES, INC. →2 incidents on file

Kulicke and Soffa Industries reported an external system breach (hacking) on May 12, 2024, discovered May 12, 2024. 949 individuals affected, including 1 Maine resident. Employee PII potentially exposed. Forensic investigation conducted; no confirmed exfiltration. Notifications sent July 3, 2024, with 24 months Experian identity protection.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered May 12, 2024 → Filed with AG Jul 9, 202458d ⏱ ME AG >30d8 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 8 weeks / 58 days

May 12, 2024

Begins

May 12, 2024

Discovered

Jul 9, 2024

Filed

vs. sector median

10 wks faster

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Massachusetts State AGbd_a91459faadd12c8e2024-07-09Verified
SEC 8-Kbd_c767eb2f7e1ceda92024-06-12 · +27dVerified
SEC 8-Kbd_f9936a06c6724fd42024-05-28 · +42dVerified
Vermont State AGLockBit Blackbd_93092a8b694937b92024-10-07 · +90dVerified

Show 4 more filings ↓up to 136d gap

Maine State AGLockBit Blackbd_79afddd586c0be582024-10-08 · +91dVerified
Indiana State AGbd_bb0545fb8150a9432024-10-08 · +91dVerified
California State AGLockBit Blackbd_8e5f97482b2313582024-10-10 · +93dVerified
California State AGLockBit Blackbd_be666efde9fec6fd2024-11-22 · +136dVerified

Name: Faegre Drinker Biddle & Reath LLP
norm: faegre drinker biddle reath

Name: KULICKE AND SOFFA INDUSTRIES, INC.
norm: kulicke and soffa
Industry: Technologyllm

Discovered: May 12, 2024
Breach occurred: May 12, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 3, 2024
Affected individuals: 949state + nationwide
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Filed notice with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Employed a highly reputable third-party forensics team
Reset passwords for all employee accounts
Suspended employee mobile email access
Identified and removed malicious files
Significantly enhanced monitoring, logging, and detection capabilities
Retained global security professionals to conduct an independent investigation
Offered 24 months of identity theft resolution services provided by Experian
Changes made: Enhanced monitoring, logging, and detection capabilities
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(58 days from discovery to filing)
Compliance flags: ME AG >30d · 58d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: May 12, 2024
→ Filed with AG: Jul 9, 2024
58d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: May 12, 2024 → Filed with AG: Jul 9, 2024	58d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 5 states

View merged incident ↗

SEC 8-KMay 28 · first

SEC 8-K+15d

Massachusetts State AG+42d

Maine State AG+42d · this page

Vermont State AG+132d

Maine State AG+133d

Indiana State AG+133d

California State AG+135d

California State AG+178d

Pattern: first filing May 28, last Nov 22 (CA) — a 178-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8eb18b17-34e7-4e12-80a4-9ee54761797d.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 9, 2024
Raw hash: 8d25c4a1f3cc6940ceb6cc126e4afb2b7735bc3d4798a0bc356b2ea2e3167449

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityFaegre Drinker Biddle & Reath LLP

Victim entityKULICKE AND SOFFA INDUSTRIES, INC.

Incidentdiscovered May 12, 2024

Stated responseEmployed a highly reputable third-party forensics team

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov