MICROCHIP TECHNOLOGY INCORPORATED
bd_6ecb6463673de655 · schema v1 · pii pii-v1
Full breach record for MICROCHIP TECHNOLOGY INCORPORATED →2 incidents on filePress / market disclosure — not a breach-notification filing
A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage — verify against the source.
mchp-20240820. Microchip Technology Incorporated: Microchip Technology Incorporated detected suspicious activity on its information systems on August 17, 2024, which resulted in disruptions to certain of its operations and the closure of some of its factories. The company is investigating the incident and working to restore its systems and normal operations. The financial impact of the incident has not yet been determined, but it could affect the company's ability to fulfill orders. Linked ransomware group: play.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Aug 17, 2024
Press report
—
Corroborated · see linked filings
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Attack → press
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Ransomware claims (2)
- Leak Siteplaybd_259ccf8fd8f654be2024-08-26 · +10dCandidate
- Leak Siteplaybd_4d17a76572a838e32024-08-17Verified by operator
Regulatory filings (1) · sorted by filing gap
- SEC 8-Kbd_21ecb5f4ca99fde02024-09-04 · +18dVerified by operator
Filing propagation · 2 filings
View merged incident ↗Pattern: first filing Aug 17, last Sep 4 — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- incident type + narrative only (may be machine-translated)
- discovery date
- materiality
- affected count
- data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
play
According to ransomware.live, Initially observed in June 2022, the Play ransomware (a.k.a PlayCrypt) operates through double extortion, targeting numerous organizations in Latin America. Its Initial Access method is quite similar to other ransomwares, involving attacks such as Phishing, Exposed Services to the Internet, and Valid Account compromises. On April 19, 2023, the security company Symantec published two new tools developed by the Play group. These tools allow the malicious actor to enumerate and exfiltrate data from the internal network. The post mentions the following: 'Play threat actors use the .NET infostealer to enumerate software and services via WMI, WinRM, Remote Registry, and Remote Service. The malware checks for the existence of security and backup software, as well as remote administration tools and other programs, saving the information in .CSV files that are compressed into a .ZIP file for later manual exfiltration by threat actors.'Source: https://github.com/crocodyli/ThreatActors-TTPs