On November 25, 2024, ENGlobal Corporation became aware of a cybersecurity incident in which a threat actor illegally accessed the Company's IT systems and encrypted some data files. The Company contained the incident, began an internal investigation, engaged external cybersecurity specialists, and restricted IT system access to essential business operations. Investigation and remediation remain ongoing; materiality to financial condition undetermined as of filing.