On August 16, 2025, Data I/O Corporation was hit by a targeted ransomware incident that originated through a vulnerability in a third-party firewall service provider. The Company shut down most global operating systems to contain the incident, engaged cybersecurity experts, and by September 2025 had fully contained and remediated the incident, incurring approximately $388,000 in one-time costs. The incident was disclosed via Form 8-K on August 21, 2025.