Manufacturing

November 10, 2024

Durham, North Carolina-based Troxler Electronic Laboratories, Inc. suffered two separate cyberattacks where hackers were able to steal personal information.

“On November 10, 2024, Troxler detected suspicious activity in its network environment,” the company said in an advisory. “Upon discovery of this incident, Troxler promptly took steps to secure its network and engaged a specialized cybersecurity firm to investigate the nature and scope of the incident. As a result of the investigation, Troxler learned that an unauthorized actor accessed certain files and data stored within our network.”

July 18, 2024

Brea, California-based paper products provider, Avery Products Corporation, discovered a ransomware attack that persisted for almost five months affecting “certain systems.” “On December 9, 2024, Avery became aware of a ransomware attack relating to certain systems,” the company said in a letter to victims. “Avery immediately launched an investigation, with the aid of forensic experts, to determine the nature and scope of the activity.

“Our investigation determined that an unauthorized actor inserted malicious software used to “scrape” credit card information used on our website avery.com between July 18, 2024, and December 9, 2024,” the company said. Avery then proceeded with a lengthy investigation to identify the personal information contained in the affected system, and then reviewed its internal records to locate the appropriate mailing addresses of those that ended up victimized by the attack. There were 61,193 victims of the attack, the company said.

July 1, 2024

Natural specialty vitamin and supplement provider, Garden of Life, LLC, suffered a cyberattack in July, but did not discover it until December. “On December 18, 2024, Garden of Life determined that an unknown third party gained access to the software that its website uses to collect payment card information for online purchases,” the company said in a notice to victims of the attack. “The unauthorized access to Garden of Life’s website appears to have occurred in July 2024.

“The software at issue in this incident (ended up) provided by a vendor and is separate from other areas of the Garden of Life website. There is no indication that any other Garden of Life systems or areas of its website were compromised,” the company said. No further information was immediately available as to who was behind the hack and what kind of attack it was.