MalwareTechnologyManufacturingInformationRansomwareLockBit BlackLockBit 3.xData EncryptedData ExfiltratedEmployee Data InvolvedRansom DemandedIdentity (basic)Financial accountLowContained

KULICKE AND SOFFA INDUSTRIES, INC.

bd_be666efde9fec6fd · schema v1 · pii pii-v1

Severity

Low

Discovered

May 12, 2024

Filed

Nov 22, 2024

To disclose

28 weeks

Affected

Not disclosed

Linked

9 filings

Confidence

66%

Full breach record for KULICKE AND SOFFA INDUSTRIES, INC. →2 incidents on file

Kulicke and Soffa Industries (K&S) experienced a ransomware attack on May 12, 2024, attributed to the 'LockBit Black' group. The threat actor encrypted files and potentially exfiltrated personal data of current/former employees and dependents, including names, identification numbers, bank account numbers, and routing numbers. K&S engaged forensic investigators and a cyber-negotiator. The incident has been contained. K&S is offering 12 months of identity theft resolution services via Experian.

J jump to incidentP pin to compareR raw source

California clockDiscovered May 12, 2024 → Notified Nov 21, 2024193d ✗ CA 60-day late28 weeks discovery → filing

Incident timeline

discovery → filing · 28 weeks / 194 days

May 12, 2024

Begins

May 12, 2024

Discovered

Nov 22, 2024

Filed

vs. sector median

+9 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

California State AGLockBit Blackbd_8e5f97482b2313582024-10-10 · +43dVerified
Maine State AGLockBit Blackbd_79afddd586c0be582024-10-08 · +45dVerified
Indiana State AGbd_bb0545fb8150a9432024-10-08 · +45dVerified
Vermont State AGLockBit Blackbd_93092a8b694937b92024-10-07 · +46dVerified

Show 4 more filings ↓up to 178d gap

Maine State AGbd_4721655bb05898a22024-07-09 · +136dVerified
Massachusetts State AGbd_a91459faadd12c8e2024-07-09 · +136dVerified
SEC 8-Kbd_c767eb2f7e1ceda92024-06-12 · +163dVerified
SEC 8-Kbd_f9936a06c6724fd42024-05-28 · +178dVerified

Name: KULICKE AND SOFFA INDUSTRIES, INC.
norm: kulicke and soffa

Name: KULICKE AND SOFFA INDUSTRIES, INC.
norm: kulicke and soffa
Industry: TechnologyllmManufacturingllm

Discovered: May 12, 2024
Breach occurred: May 12, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 21, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Financial account
Attack vector: Ransomware· LockBit Black
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: LockBit BlackExternalFinancial

During the incident: Reset passwords for all employee accounts
Suspended employee mobile email access
Identified and removed malicious files
Significantly enhanced our monitoring, logging, and detection capabilities
Retained global security professionals to conduct an independent investigation and assist with our recovery efforts
Engaged a cyber-negotiator to reach out to the threat actor
Changes made: Offering 12 months of identity theft resolution services provided by Experian’s IdentityWorks at no charge
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 weeks(194 days from discovery to filing)
Compliance flags: CA 60-day late · 193d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: May 12, 2024
→ Notified: Nov 21, 2024
193d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: May 12, 2024 → Notified: Nov 21, 2024	193d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 5 states

View merged incident ↗

SEC 8-KMay 28 · first

SEC 8-K+15d

Maine State AG+42d

Massachusetts State AG+42d

Vermont State AG+132d

Maine State AG+133d

Indiana State AG+133d

California State AG+135d

California State AG+178d · this page

Pattern: first filing May 28, last Nov 22 (CA) — a 178-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-595272
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 22, 2024
Raw hash: d519a05a64c90fb4d71713fdc3328df5f8a63fdfd78e2a8331765e131eef4288

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityKULICKE AND SOFFA INDUSTRIES, INC.

Victim entityKULICKE AND SOFFA INDUSTRIES, INC.

Incidentdiscovered May 12, 2024

Stated responseReset passwords for all employee accounts

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov