Loading story…
Analog Devices disclosed that an unauthorized party accessed certain internal systems and exfiltrated some company files, prompting the semiconductor company to activate incident response procedures, engage external cybersecurity experts, and notify law enforcement. The company said it detected the intrusion on June 23 and later reported the incident in an SEC Form 8-K, adding that it is still determining the scope of the breach and the type of data affected.
The company said it has not observed stolen data being leaked or used fraudulently and does not currently expect the incident to materially affect operations or its financial condition. Analog Devices also said it is evaluating a separate cybersecurity matter that became public in late July, while an extortion group known as ExfilSquad separately claimed on its leak site to have stolen roughly 570,000 customer records; the company has not linked that claim to the disclosed breach, and the allegation remains unverified.
See attribution, scope, and your downstream exposure.
3 events from the most recent confirmed update back to the earliest known activity.
Analog Devices publicly disclosed the cybersecurity incident in a Form 8-K, stating that an unauthorized party accessed certain systems and exfiltrated some files. The company said it was still determining what data was affected and did not currently expect a material impact on operations or financial condition.
ExfilSquad listed Analog Devices on its leak site and claimed to have stolen about 570,000 customer records. The company did not attribute the intrusion to the group, and any connection between the claim and the disclosed breach remained unconfirmed.
Analog Devices detected unauthorized activity on certain internal systems and determined that some company files had been exfiltrated. The company activated incident response procedures, engaged external cybersecurity experts, and notified law enforcement, while saying operations were not disrupted.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
6 references tracked. Mallory keeps watching after this page renders.
cyberveille.ch
Open sourcetherecord.media
Open sourceteiss.co.uk
Open sourcebleepingcomputer.com
Open sourcecybersecuritynews.com
Open sourcesec.gov
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Medtronic said an unauthorized party accessed data in portions of its corporate IT environment and that it has contained the incident, activated response procedures, and engaged external cybersecurity experts. The company said it has not identified any impact on **products**, **patient safety**, customer connections, manufacturing and distribution operations, financial reporting systems, or its ability to meet patient needs, stressing that corporate IT, product, manufacturing, and hospital customer networks are segmented. The disclosure followed extortion claims tied to **ShinyHunters**, which said it stole more than **9 million records** containing personally identifiable information along with terabytes of internal corporate data and briefly listed Medtronic on its leak site before the entry disappeared. Medtronic said its investigation is ongoing to determine whether personal data was accessed and that it will notify affected individuals and provide support services if exposure is confirmed, while separate reporting also linked the incident to **Handala**, underscoring uncertainty around attribution even as the breach itself has been confirmed.
Jul 3, 2026
AMD said it is investigating claims that its internal network was breached after the threat actor **IntelBroker** advertised a large cache of alleged company data for sale on a cybercrime forum. Reported samples indicate the material may include **future product details, source code, firmware, internal communications, financial records, customer databases, and employee information**, raising concerns over intellectual property exposure, corporate espionage, and privacy risks. AMD said it is working with **law enforcement** and a third-party hosting partner to determine whether the data is authentic and to assess the scope and impact of the incident. The AMD claims fit a broader pattern of high-profile extortion and data-theft allegations tied to forum-based actors, including earlier reports in which attackers claimed to possess sensitive files from major organizations such as **GE** and even purported **DARPA**-related material, though some of those assertions remained unconfirmed. In AMD's case, public reporting indicates the stolen dataset was promoted on the dark web and may contain strategically valuable engineering and business information, making the incident significant even before full verification is complete.
Jun 29, 2026
iRhythm Holdings disclosed a material cybersecurity incident after attackers used social engineering to access certain third-party-hosted business applications and exfiltrate sensitive data. According to the company’s SEC filing, unauthorized activity was identified on June 8, and on June 9 a threat actor contacted iRhythm claiming to possess proprietary company information, patient **protected health information**, and other personal data, while demanding payment to stop the information from being publicly released. The company said the intrusion was confined to third-party business applications and that there is no evidence its products, clinical or medical device systems, customer connections, patient safety, manufacturing and distribution operations, or financial reporting systems were affected. iRhythm has not named a responsible group or disclosed how many individuals were impacted, and said it is still investigating with external cybersecurity experts whether the attacker’s claims fully match the data stolen; it also stated that payment card and financial account information were not involved and that it has not found evidence of ongoing unauthorized access.
Jun 29, 2026