MalwareTechnologyManufacturingInformationRansomwareLockBit BlackLockBit 3.xData ExfiltratedData EncryptedRansom DemandedIdentity (basic)Financial accountLowContained

KULICKE AND SOFFA INDUSTRIES, INC.

bd_93092a8b694937b9 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 12, 2024

Filed

Oct 7, 2024

To disclose

21 weeks

Affected

Not disclosed

Linked

9 filings

Confidence

66%

Full breach record for KULICKE AND SOFFA INDUSTRIES, INC. →2 incidents on file

Kulicke and Soffa Industries, Inc. disclosed a ransomware attack by LockBit Black discovered on May 12, 2024. The incident resulted in the encryption of files and potential exfiltration of employee and dependent personal information, including names, identification numbers, and bank account/routing numbers. The company engaged forensic investigators, reset credentials, and offered 12 months of Experian identity monitoring services.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday21 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 21 weeks / 148 days

May 12, 2024

Discovered

Oct 7, 2024

Filed

vs. sector median

+2 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Maine State AGLockBit Blackbd_79afddd586c0be582024-10-08 · +1dVerified
Indiana State AGbd_bb0545fb8150a9432024-10-08 · +1dVerified
California State AGLockBit Blackbd_8e5f97482b2313582024-10-10 · +3dVerified
California State AGLockBit Blackbd_be666efde9fec6fd2024-11-22 · +46dVerified

Show 4 more filings ↓up to 132d gap

Maine State AGbd_4721655bb05898a22024-07-09 · +90dVerified
Massachusetts State AGbd_a91459faadd12c8e2024-07-09 · +90dVerified
SEC 8-Kbd_c767eb2f7e1ceda92024-06-12 · +117dVerified
SEC 8-Kbd_f9936a06c6724fd42024-05-28 · +132dVerified

Name: KULICKE AND SOFFA INDUSTRIES, INC.
norm: kulicke and soffa

Name: KULICKE AND SOFFA INDUSTRIES, INC.
norm: kulicke and soffa
Industry: TechnologyllmManufacturingllm

Discovered: May 12, 2024
Materiality determined: —
Notification sent: Oct 7, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Financial account
Attack vector: Ransomware· LockBit Black
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: LockBit BlackExternalFinancial
Regulator citations: Filed notice with Vermont Attorney General

During the incident: Employed a highly reputable third-party forensics team
Engaged a cyber-negotiator
Reset passwords for all employee accounts
Suspended employee mobile email access
Identified and removed malicious files
Significantly enhanced monitoring, logging, and detection capabilities
Retained global security professionals to conduct an independent investigation
Arranged to make available 12 months of identity theft resolution services provided by Experian
Changes made: Enhanced monitoring, logging, and detection capabilities
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(148 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 5 states

View merged incident ↗

SEC 8-KMay 28 · first

SEC 8-K+15d

Maine State AG+42d

Massachusetts State AG+42d

Vermont State AG+132d · this page

Maine State AG+133d

Indiana State AG+133d

California State AG+135d

California State AG+178d

Pattern: first filing May 28, last Nov 22 (CA) — a 178-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-10-07-kulicke-soffa-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 7, 2024
Raw hash: 2e72f5a73a93e95e8343cb6f5474bf770b23b9ec06d4f2af85b11442d1e76a0d

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityKULICKE AND SOFFA INDUSTRIES, INC.

Victim entityKULICKE AND SOFFA INDUSTRIES, INC.

Incidentdiscovered May 12, 2024

Stated responseEmployed a highly reputable third-party forensics team

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov