Willdan Group, Inc.

SEC 10-K Item 1C filing describing the registrant's cybersecurity risk management and governance processes. No specific cybersecurity incident, breach, or material impact is disclosed. The filing details preventive measures, monitoring tools, and third-party vendor management practices.

Willdan's Form 10-K Item 1C cybersecurity disclosure describes the company's cybersecurity risk management program, governance structure, and board oversight. The filing describes program design (EDR/XDR, SASE, ISO 27001 and SOC2 certifications, third-party consultants) and management/board oversight roles. No specific cybersecurity incident, breach, unauthorized access event, or affected-individual count is disclosed in this Item 1C narrative.

Willdan Group, Inc. experienced an external system breach, or hacking incident, on November 4, 2020, which was later discovered on July 23, 2021. The breach resulted in the compromise of names and driver's license numbers. The company notified the 15 affected Maine residents in writing on August 18, 2021, and offered them 12 months of credit monitoring and identity theft protection services through Experian.

Willdan Group, Inc. experienced an external system breach on November 4, 2020, which was discovered on April 27, 2021. The breach affected two Maine residents, compromising their names along with their driver's license or non-driver identification card numbers. The company notified affected individuals on June 4, 2021, and offered 12 months of credit monitoring and identity theft protection services through American Identity Group.