Manufacturing

October 15, 2025

North Plains, Oregon-based specialty wood and metal products maker, Jewett-Cameron Trading Co. Ltd., suffered a ransomware attack last month that caused disruption and limited access to portions of the company’s support to operations.
“On October 15, 2025, Jewett-Cameron Trading Co. Ltd. learned that a threat actor had gained unauthorized access to portions of the Company’s information technology environment and claimed to have unlawfully accessed certain Company information and data,” the company said in an 8-K report to the Securities and Exchange Commission (SEC). “The Company immediately activated its cyber incident response process to contain the intrusion, assess and investigate the incident and implement remedial measures.”
Due to the extended period the company has been and may continue to be offline, operations may end up materially impacted, which may also impact financial results for the first quarter of fiscal 2026, according to the notice.

September 20, 2025

Communications equipment maker, Melbourne, Florida-based BK Technologies suffered a cyberattack in September and it appears a ransomware attack group is taking credit for the hack.
“On or about September 20, 2025, BK Technologies Corporation detected potentially suspicious activity involving its information technology (“IT”) systems,” according to the 8-K report with the Securities and Exchange Commission (SEC). “Upon detecting the issue, the company began taking steps to assess, contain, and remediate the potentially unauthorized activity, including isolating the affected systems and launching an investigation with the assistance of external cybersecurity advisors.”
As a result of the incident, a limited number of non-critical systems experienced minor disruption.

October 8, 2025

High-end embroidery thread maker, Gilford, New Hampshire-based Madeira USA LLC suffered a cyberattack in October and is informing victims as soon as possible their personally identifiable information ended up stolen in the hack.
“On October 8, 2025, Madeira USA LLC identified a security incident that involved unauthorized access to certain servers within its network,” the company said in a letter to victims. “Madeira immediately implemented their incident response plan, took steps to contain the activity, and launched an investigation.”
Madeira immediately took steps to secure the network, notified law enforcement, and launched an investigation into the matter.

February 28, 2025

Andover, Massachusetts-based maker of asphalt products, Brox Industries, Inc. suffered a cyberattack in February that it discovered in March and is now informing victims their personally identifiable information ended up stolen in the hack.
“Brox Industries detected unauthorized access to our network on March 11, 2025,” the company said in a letter to victims of the attack. “Upon learning of this issue, we immediately secured the environment, commenced a prompt and thorough investigation.”
After an extensive forensic investigation and manual document review, Brox said it found on October 3 an unauthorized actor may have accessed and/or acquired certain files containing personal information between February 28, 2025 and March 11, 2025.

May 20, 2025

Kearneysville, West Virginia sign maker, DALB, Inc. suffered a cyberattack in May and is now informing victims their personally identifiable information ended up stolen in the hack.
“On May 20, 2025, we detected suspicious activity within our network,” the company said in a letter to victims. “We promptly initiated an investigation of the matter and engaged cybersecurity specialists to assist with the incident response.”
As a result of the investigation, the company found certain files may have ended up accessed or acquired without authorization on May 20

September 2, 2025

Johnston, Rhode Island-based organic personal care products maker, Pure Haven, LLC, suffered a cyberattack last month where personally identifiable information ended up stolen by threat actors.
The company identified potentially suspicious activity related to an internal account on September 2.
“Upon discovery we took immediate action to address and investigate the activity, including performing a password reset and engaging third-party specialists to assist in conducting a full investigation,” the company said in a letter to victims of the attack. “Through our investigation, on or around September 5, 2025, we determined that an unauthorized individual may have accessed or acquired certain information on September 2, 2025.”