FEDERALItem 1.05 · mandatoryHackingTechnologyManufacturingInformationPrinted Circuit BoardsCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)MediumContained

Key Tronic Corporation

bd_fadfd918c72bd1c8 · schema v1 · pii pii-v1

Severity

Medium

Financial impact

$600K

Discovered

May 6, 2024

Filed

Jun 14, 2024

To disclose

6 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

87%

Full breach record for Key Tronic Corporation →2 incidents on file

On May 6, 2024, Key Tronic Corporation detected unauthorized third-party access to portions of its IT systems. The company halted domestic and Mexico operations for approximately two weeks during remediation. A threat actor exfiltrated limited data including some personally identifiable information. The company incurred approximately $600,000 in external cybersecurity expert costs and expects a material impact on Q4 FY2024 financial results.

J jump to incidentP pin to compareR raw source

SEC clockMateriality determined May 10, 2024 → Filed Jun 14, 202435d ✗ SEC 4-day late6 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 6 weeks / 39 days

May 6, 2024

Discovered

May 10, 2024

Scope determined

Jun 14, 2024

Filed

vs. sector median

13 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

SEC 8-Kbd_6f7913e2bc02ff982024-05-10 · +35dCandidate
SEC 8-Kbd_799fe053e8f2b15d2024-08-06 · +53dVerified

Name: Key Tronic Corporation
norm: key tronic
SEC CIK: 0000719733
Domain: keytronic.com

Name: Key Tronic Corporation
norm: key tronic
SEC CIK: 0000719733
Domain: keytronic.com
Industry: TechnologyllmManufacturingllm
NAICS 334412 · Bare Printed Circuit Board Manufacturing

Discovered: May 6, 2024
Materiality determined: May 10, 2024
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Providing notifications to regulatory agencies as required by applicable law

During the incident: Activated its cyber incident response procedure to investigate, contain, and remediate the incident
Engaged external cybersecurity experts to help investigate the scope and impact of the cybersecurity incident
Notified law enforcement
Halted domestic and Mexico operations for approximately two weeks during remediation efforts
Providing appropriate notifications to potentially affected parties and to regulatory agencies as required by applicable law
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(39 days from discovery to filing)
Compliance flags: SEC 4-day late · 35d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
SEC
Materiality determined: May 10, 2024
→ Filed: Jun 14, 2024
35d cal. 4 business days SEC 4-day late

Statute	Window	Elapsed	Threshold	Status
SEC	Materiality determined: May 10, 2024 → Filed: Jun 14, 2024	35d cal.	4 business days	SEC 4-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings

View merged incident ↗

SEC 8-KMay 10 · first

SEC 8-K+35d · this page

SEC 8-K+88d

Pattern: first filing May 10, last Aug 6 — a 88-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/719733/000071973324000035/ktcc-20240506.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Jun 14, 2024
Raw hash: 99751344b4eabd4994796e43ba30c3707ac31cb444deea973693e1a1d2b41a70

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html33.5 KB

Download View at source

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityKey Tronic Corporation

Victim entityKey Tronic Corporation

Incidentdiscovered May 6, 2024

Stated responseActivated its cyber incident response procedure to investigate, contain, and remediate the incident

ComplianceSEC 4-day late

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing