FEDERALItem 1.05 · mandatoryHackingManufacturingManufacturingPrinted Circuit BoardsCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)HighContained

Key Tronic Corporation

bd_799fe053e8f2b15d · schema v1 · pii pii-v1

Severity

High

Financial impact

$2.30M

Discovered

May 6, 2024

Filed

Aug 6, 2024

To disclose

13 weeks

Affected

Not disclosed

Linked

4 records

Confidence

87%

Full breach record for Key Tronic Corporation →

Key Tronic Corporation, a Washington-incorporated electronics contract manufacturer, detected unauthorized third-party access to portions of its IT systems on May 6, 2024. The threat actor exfiltrated limited data including some personally identifiable information. The Company halted domestic and Mexico operations for approximately two weeks; operations were restored in mid-June 2024. The incident caused approximately $2.3 million in additional expenses and approximately $15 million in unfulfilled Q4 FY2024 revenue. Filed as 8-K/A Amendment No. 2 on August 6, 2024.

J jump to incidentP pin to compareR raw source

SEC clockMateriality determined May 6, 2024 → Filed Aug 6, 202492d ✗ SEC 4-day late13 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 13 weeks / 92 days

May 6, 2024

Discovered

Aug 6, 2024

Filed

This filing is one of 4 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblack_bastabd_4b77588fbfef33612024-05-31 · +66dVerified by operator

Regulatory filings (2) · sorted by filing gap

SEC 8-Kbd_fadfd918c72bd1c82024-06-14 · +53dVerified by operator
SEC 8-Kbd_6f7913e2bc02ff982024-05-10 · +88dCandidate

Name: Key Tronic Corporation
norm: key tronic
SEC CIK: 0000719733
Domain: keytronic.com

Name: Key Tronic Corporation
norm: key tronic
SEC CIK: 0000719733
Domain: keytronic.com
Industry: Manufacturingllm
NAICS 334412 · Bare Printed Circuit Board Manufacturing

Discovered: May 6, 2024
Materiality determined: May 6, 2024
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Filed Form 8-K with SEC on May 10, 2024Filed Form 8-K/A Amendment No. 1 with SEC on June 14, 2024Filed Form 8-K/A Amendment No. 2 with SEC on August 6, 2024Notified law enforcement

During the incident: Activated its cyber incident response procedure to investigate, contain, and remediate the incident
Engaged external cybersecurity experts to help investigate the scope and impact of the cybersecurity incident
Notified law enforcement
Halted domestic and Mexico operations for approximately two weeks during remediation efforts
Continued to pay wages in accordance with statutory requirements
Providing appropriate notifications to potentially affected parties and to regulatory agencies as required by applicable law
Changes made: Deployed new IT-related infrastructure
Engaged cyber security experts to remediate the incident
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(92 days from discovery to filing)
Compliance flags: SEC 4-day late · 92d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
SEC
Materiality determined: May 6, 2024
→ Filed: Aug 6, 2024
92d cal. 4 business days SEC 4-day late

Statute	Window	Elapsed	Threshold	Status
SEC	Materiality determined: May 6, 2024 → Filed: Aug 6, 2024	92d cal.	4 business days	SEC 4-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings

View merged incident ↗

SEC 8-KMay 10 · first

SEC 8-K+35d

SEC 8-K+88d · this page

Pattern: first filing May 10, last Aug 6 — a 88-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/719733/000071973324000047/ktcc-20240506.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Aug 6, 2024
Raw hash: 9dfb3c5f60ccc988b28378e884e6abbea69fe8eafbb9fe9667472b7772e6c064

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html33.5 KB

Download View at source

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityKey Tronic Corporation

Victim entityKey Tronic Corporation

Incidentdiscovered May 6, 2024

Stated responseActivated its cyber incident response procedure to investigate, contain, and remediate the incident

ComplianceSEC 4-day late

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing