Carlysle Engineering, Inc. disclosed a ransomware attack on March 23, 2026, affecting its primary file server. The incident resulted in the encryption of files and exfiltration of employee HR data, including names, SSNs, and driver's license numbers. Carlysle engaged OCD Tech for forensic investigation and containment, shut down affected connections, and is offering 24 months of identity theft protection to affected employees. The breach notification was filed in Massachusetts on May 14, 2026.