Manufacturing

September 8, 2024

Morgantown, Pennsylvania-based Nuna Baby Essentials, Inc identified suspicious activity on its website’s payment platform. Through its investigation, the company found information entered on the checkout page between September 8 and December 6 may have ended up copied or accessed by an unauthorized party. Nuna said in a notice to the 16,676 victims it promptly took steps to secure the website and began an investigation to better understand the nature and scope of this activity.

December 24, 2024

New York-based Anellotech Inc. fell victim to a ransomware attack in late December. On January 13, Anellotech – a maker of sustainable chemicals – said it became aware of a ransomware attack. The company took affected systems offline, engaged external cybersecurity experts, communicated with law enforcement, began remediation and launched an investigation. Anellotech said in a letter to their workers: “While the forensic investigation is continuing, we believe that your personal information may have been affected,”

December 8, 2024

Manufacturer of pneumatic technology for industrial automation, SMC Corporation of America, fell victim to an attempted ransomware attack. The company quickly discovered the incident on December 8 and retained third-party cybersecurity experts who implemented security measures to contain the Incident.

Indiana-based SMC said the stolen information potentially exposed included employment data, which could include sensitive personal information, such as: first and last name, date of birth, address, bank account information, driver’s licenses, certain payroll information, SMC employee account number and position, Social Security Number, SMC employee benefit information, data related to certain medical information in connection with SMC benefits, and other identifying information.

January 24, 2025

Lakeland, Florida-based Mid-State Industrial Maintenance fell victim to a cyberattack. “Our investigation determined that between January 23, 2025, and January 24, 2025, certain files and folders were copied from our network without authorization,” the company said in a letter to its victims.

January 13, 2025

Woodville, Wisconsin-based McMillan Electric Company suffered a cyberattack. The threat actor gained access to the firm’s network an stole personal information. The attack affects 6,162 victims. The company discovered on January 13 the unauthorized attacker acquired some personal information, and conducted an extensive forensic investigation.

November 2, 2024

Textiles Coated, Inc. (TCI) suffered a cyberattack in November. TCI determined that from November 1 to November 4 certain systems in its environment ended up accessed by an unknown actor. Certain files may have been copied without authorization.

May 20, 2024

Greendale, Wisconsin-based GIGAFLIGHT Connectivity, Inc. (GCI) suffered a cyberattack over a period of time in 2024. “Upon identifying the activity, GCI took steps to secure the accounts and began our investigation,” the company said in an advisory. “The investigation determined that an unauthorized person may have accessed the email accounts between May 20, 2024, and November 22, 2024. On January 29, 2025 GCI commenced mailing notifications to victims.