MalwareTechnologyManufacturingInformationRansomwareLockBit BlackLockBit 3.xData EncryptedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

KULICKE AND SOFFA INDUSTRIES, INC.

bd_8e5f97482b231358 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 12, 2024

Filed

Oct 10, 2024

To disclose

22 weeks

Affected

Not disclosed

Linked

9 filings

Confidence

66%

Full breach record for KULICKE AND SOFFA INDUSTRIES, INC. →2 incidents on file

Kulicke and Soffa Industries experienced a ransomware attack on May 12, 2024, attributed to 'LockBit Black'. The attacker encrypted files and potentially exfiltrated data. Affected data included names, SSNs, and bank account numbers of current and former employees. K&S reset passwords, suspended mobile email, removed malware, and engaged forensics. Identity theft protection was offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 22 weeks / 151 days

May 12, 2024

Begins

May 12, 2024

Discovered

Oct 10, 2024

Filed

vs. sector median

+3 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Maine State AGLockBit Blackbd_79afddd586c0be582024-10-08 · +2dVerified
Indiana State AGbd_bb0545fb8150a9432024-10-08 · +2dVerified
Vermont State AGLockBit Blackbd_93092a8b694937b92024-10-07 · +3dVerified
California State AGLockBit Blackbd_be666efde9fec6fd2024-11-22 · +43dVerified

Show 4 more filings ↓up to 135d gap

Maine State AGbd_4721655bb05898a22024-07-09 · +93dVerified
Massachusetts State AGbd_a91459faadd12c8e2024-07-09 · +93dVerified
SEC 8-Kbd_c767eb2f7e1ceda92024-06-12 · +120dVerified
SEC 8-Kbd_f9936a06c6724fd42024-05-28 · +135dVerified

Name: KULICKE AND SOFFA INDUSTRIES, INC.
norm: kulicke and soffa

Name: KULICKE AND SOFFA INDUSTRIES, INC.
norm: kulicke and soffa
Industry: TechnologyllmManufacturingllm

Discovered: May 12, 2024
Breach occurred: May 12, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Ransomware· LockBit Black
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: LockBit BlackExternalFinancial

During the incident: Reset passwords for all employee accounts
Suspended employee mobile email access
Identified and removed malicious files
Significantly enhanced our monitoring, logging, and detection capabilities
Retained global security professionals to conduct an independent investigation and assist with our recovery efforts
Engaged a cyber-negotiator to reach out to the threat actor
Changes made: Offering 12 months of identity theft resolution services provided by Experian’s IdentityWorks at no charge
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 weeks(151 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 5 states

View merged incident ↗

SEC 8-KMay 28 · first

SEC 8-K+15d

Maine State AG+42d

Massachusetts State AG+42d

Vermont State AG+132d

Maine State AG+133d

Indiana State AG+133d

California State AG+135d · this page

California State AG+178d

Pattern: first filing May 28, last Nov 22 (CA) — a 178-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-593171
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 10, 2024
Raw hash: 474018d30e5dae22e13c1d1c0eac970cc25d993ed4a58b618b48407855ed7b0d

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityKULICKE AND SOFFA INDUSTRIES, INC.

Victim entityKULICKE AND SOFFA INDUSTRIES, INC.

Incidentdiscovered May 12, 2024

Stated responseReset passwords for all employee accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov