FEDERALMalwareTechnologyManufacturingInformationRansomwareVulnerability ExploitTargetedSupply Chain (3P Vendor)Data EncryptedMediumResolved

Data I/O Corporation

bd_c9378aea9247a943 · schema v1 · pii pii-v1

Severity

Medium

Financial impact

$388K

Discovered

Aug 16, 2025

Filed

Apr 16, 2026

To disclose

35 weeks

Affected

Not disclosed

Confidence

84%

Full breach record for Data I/O Corporation →3 incidents on file

On August 16, 2025, Data I/O Corporation was hit by a targeted ransomware incident that originated through a vulnerability in a third-party firewall service provider. The Company shut down most global operating systems to contain the incident, engaged cybersecurity experts, and by September 2025 had fully contained and remediated the incident, incurring approximately $388,000 in one-time costs. The incident was disclosed via Form 8-K on August 21, 2025.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 35 weeks / 243 days

Aug 16, 2025

Begins

Aug 16, 2025

Discovered

Aug 21, 2025

Scope determined

Apr 16, 2026

Filed

vs. sector median

+16 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.No incident reportedView incident

Name: Data I/O Corporation
norm: data i o
Domain: dataio.com

Name: Data I/O Corporation
norm: data i o
Domain: dataio.com
Industry: TechnologyllmManufacturingllm

Discovered: Aug 16, 2025
Breach occurred: Aug 16, 2025 – Sep 30, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: Aug 21, 2025
Notification sent: —
Affected individuals: Not disclosed
Data types: —
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing ApplicationT1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Regulator citations: Reported the incident on Form 8-K filed with the SEC on August 21, 2025
Initial access: exploit_public_facing

During the incident: Promptly activated its response protocols and implemented containment measures
Proactively shutting down most operating systems globally to manage the safety of the overall global systems environment
Engaged leading cybersecurity experts to support system recovery and conduct a comprehensive forensic investigation
Reported the incident on Form 8-K filed with the SEC on August 21, 2025
Engaged independent cybersecurity consultants to review and validate the effectiveness of its enhanced security posture
Changes made: Patching the third-party firewall service provider through which the attack originated and evaluating replacement providers
Enhancements to system access controls
Improved network segmentation
Migration of critical systems to cloud-based solutions
Expanded monitoring and review procedures
Expanding endpoint detection and response capabilities
Enhancing backup and disaster recovery procedures
Conducting comprehensive vulnerability assessments across all IT systems
Providing additional cybersecurity awareness training to all employees
Audit Committee increased the frequency of cybersecurity reporting
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 35 weeks(243 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/351998/000165495426003625/daio_10k.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Apr 16, 2026
Raw hash: 3328fdfc8bf3fafdba0be3a8754b4adce4f7d5043789f8974458cfc6a910d04c

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html1.2 MB

Download View at source

Reporting entityData I/O Corporation

Victim entityData I/O Corporation

Incidentdiscovered Aug 16, 2025

Stated responsePromptly activated its response protocols and implemented containment measures

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing