Automation Service Provider, Caltrol, Suffers Cyberattack

December 29, 2025

INCIDENT

Automation services provider, Caltrol Inc. suffered a cyberattack over a six-day period at the end of January into February where a threat actor was able to exfiltrated personally identifiable information of victims.
From Monday, January 27 until Saturday, February 1, Caltrol suffered an attack that involved personal information. The company sent out letters saying “we received your information because your parent or spouse is employed by our organization.”
“On February 1, 2025, Caltrol became aware of technical issues related to our server,” the company said in a letter to victims. “Upon discovery, we took immediate action to secure our company’s systems and retained outside cyber counsel and engaged independent IT specialists (at the direction of counsel) to investigate the incident.”

Incident Date

January 27, 2025

Estimated Cost


No cost values disclosed.

Victims

Type of Malware

No Malware identified

Threat Source

No threat source identified