MalwareTechnologyManufacturingInformationRansomwareLockBit BlackLockBit 3.xRansom DemandedData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Financial accountMediumContained

KULICKE AND SOFFA INDUSTRIES, INC.

bd_79afddd586c0be58 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 12, 2024

Filed

Oct 8, 2024

To disclose

21 weeks

Affected · nationwide

1,1052 in this filing

Linked

9 filings

Confidence

67%

Full breach record for KULICKE AND SOFFA INDUSTRIES, INC. →2 incidents on file

Kulicke and Soffa Industries experienced a ransomware attack by LockBit Black on May 12, 2024. The incident involved data encryption and potential exfiltration of employee and dependent personal information, including names, ID numbers, and bank account details. 1,105 individuals were affected. K&S engaged forensic investigators and a cyber-negotiator, reset credentials, and offered 12 months of Experian identity monitoring services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered May 12, 2024 → Filed with AG Oct 8, 2024149d ✗ ME AG >90d21 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 21 weeks / 149 days

May 12, 2024

Begins

May 12, 2024

Discovered

Oct 8, 2024

Filed

vs. sector median

+3 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Indiana State AGbd_bb0545fb8150a9432024-10-08Verified
Vermont State AGLockBit Blackbd_93092a8b694937b92024-10-07 · +1dVerified
California State AGLockBit Blackbd_8e5f97482b2313582024-10-10 · +2dVerified
California State AGLockBit Blackbd_be666efde9fec6fd2024-11-22 · +45dVerified

Show 4 more filings ↓up to 133d gap

Maine State AGbd_4721655bb05898a22024-07-09 · +91dVerified
Massachusetts State AGbd_a91459faadd12c8e2024-07-09 · +91dVerified
SEC 8-Kbd_c767eb2f7e1ceda92024-06-12 · +118dVerified
SEC 8-Kbd_f9936a06c6724fd42024-05-28 · +133dVerified

Name: Faegre Drinker
norm: faegre drinker

Name: KULICKE AND SOFFA INDUSTRIES, INC.
norm: kulicke and soffa
Industry: TechnologyllmManufacturingllm

Discovered: May 12, 2024
Breach occurred: May 12, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 8, 2024
Affected individuals: 1,105state + nationwide
Data types: Identity (basic)Financial account
Attack vector: Ransomware· LockBit Black
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: LockBit BlackExternalFinancial

During the incident: Employed a highly reputable third-party forensics team
Engaged a cyber-negotiator
Reset passwords for all employee accounts
Suspended employee mobile email access
Identified and removed malicious files
Significantly enhanced monitoring, logging, and detection capabilities
Retained global security professionals to conduct an independent investigation
Changes made: Enhanced monitoring, logging, and detection capabilities
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(149 days from discovery to filing)
Compliance flags: ME AG >90d · 149dME resident >60d · 149d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: May 12, 2024
→ Filed with AG: Oct 8, 2024
149d 90 days ME AG >90d
Maine
Discovered: May 12, 2024
→ Notified: Oct 8, 2024
149d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: May 12, 2024 → Filed with AG: Oct 8, 2024	149d	90 days	ME AG >90d
Maine	Discovered: May 12, 2024 → Notified: Oct 8, 2024	149d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 5 states

View merged incident ↗

SEC 8-KMay 28 · first

SEC 8-K+15d

Maine State AG+42d

Massachusetts State AG+42d

Vermont State AG+132d

Indiana State AG+133d

Maine State AG+133d · this page

California State AG+135d

California State AG+178d

Pattern: first filing May 28, last Nov 22 (CA) — a 178-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/7b759627-3451-4563-bd2f-c1d511fd1ed8.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 8, 2024
Raw hash: 6f1fac82e4fe19955b273c412c445797485e1d061bca5e3c7977c71ed7425053

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityFaegre Drinker

Victim entityKULICKE AND SOFFA INDUSTRIES, INC.

Incidentdiscovered May 12, 2024

Stated responseEmployed a highly reputable third-party forensics team

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov