KULICKE AND SOFFA INDUSTRIES, INC.

Kulicke and Soffa Industries (K&S) experienced a ransomware attack on May 12, 2024, attributed to the 'LockBit Black' group. The threat actor encrypted files and potentially exfiltrated personal data of current/former employees and dependents, including names, identification numbers, bank account numbers, and routing numbers. K&S engaged forensic investigators and a cyber-negotiator. The incident has been contained. K&S is offering 12 months of identity theft resolution services via Experian.

Kulicke and Soffa Industries experienced a ransomware attack on May 12, 2024, attributed to 'LockBit Black'. The attacker encrypted files and potentially exfiltrated data. Affected data included names, SSNs, and bank account numbers of current and former employees. K&S reset passwords, suspended mobile email, removed malware, and engaged forensics. Identity theft protection was offered.

Kulicke and Soffa Industries, a commercial business, reported an external system breach that was discovered on September 17, 2024. The breach, which occurred on May 12, 2024, impacted 2 Maine residents. The company provided written notification to the affected individuals on October 8, 2024, and offered 12 months of identity monitoring services through Experian.

Kulicke and Soffa Industries reported a data breach to the Indiana Attorney General. The breach occurred on 2024-05-12 and was reported on 2024-10-08. 1 Indiana residents were affected. 1,105 individuals affected in total.

Kulicke and Soffa Industries, Inc. disclosed a ransomware attack by LockBit Black discovered on May 12, 2024. The incident resulted in the encryption of files and potential exfiltration of employee and dependent personal information, including names, identification numbers, and bank account/routing numbers. The company engaged forensic investigators, reset credentials, and offered 12 months of Experian identity monitoring services.

On May 12, 2024, Kulicke and Soffa Industries (K&S) discovered first indications of a cybersecurity incident. A third-party forensics team was engaged and on June 11, 2024, determined a possibility that personal data of current or former employees may have been exfiltrated, though K&S states it is unlikely data was actually accessed. Consumer notifications were sent July 3, 2024. 949 total individuals affected; 1 Maine resident. 24-month Experian IdentityWorks monitoring offered.

Kulicke and Soffa Industries filed an amended Form 8-K (Amendment No. 1) to supplement a prior cybersecurity disclosure. The company detected unauthorized access attempts into its network and servers on May 12, 2024. The Company determined that a threat actor accessed and acquired source code, engineering information, business partner data, and personally identifiable information. The investigation remains ongoing, and the Company does not believe the incident has had a material impact on operations or financial condition.