Manufacturing

April 26, 2024

Global home designer and manufacturer, Fiskars Group fell victim to a cyberattack this past March and is now informing victims of the incident.
Fiskars Group, which has a U.S. headquarters in Middleton, Wisconsin and global headquarters in Fiskars, Finland, said there were 6,306 victims in the attack.
“On April 26, 2024, we discovered unauthorized activity on Fiskars’ network,” the company said in a letter to its victims. “Fiskars immediately began an investigation to assess the nature and scope of the activity. Fiskars engaged third-party cybersecurity experts, and we notified law enforcement.”

January 7, 2024

Maker and retailer of blinds, window shades and other window coverings, SelectBlinds suffered a cyberattack this past January and is now informing victims of the incident.
On October 31, SelectBlinds filed a notice of data breach after discovering the company was the target of a cyberattack back in January. In the notice, SelectBlinds said the incident resulted in an unauthorized party being able to access consumers’ sensitive information.
After learning that sensitive consumer data was accessible to an unauthorized party, SelectBlinds reviewed the compromised files to determine what information leaked and which consumers ended up impacted. SelectBlinds just completed this process, identifying an estimated 206,238 individuals who had information compromised as a result of the incident.

August 30, 2024

Great Neck, New York-based S. Lichtenberg & Co., Inc. suffered a cyberattack “to a portion of our network” this past August and it just completed its investigation.
The manufacturer of curtains, draperies, and home fashion products, along with soft window treatments, shower curtains, and bedding to the retail trade, sent letters out to victims last Wednesday after it completed its investigation earlier in October.
“We are writing to inform you of a cyber security event experienced by S. Lichtenberg & Co., Inc. that may have involved your information described below,” the company said in an advisory. “While we have no evidence of attempted or actual misuse of any information, we are providing you with information about the incident, our response, and steps you can take to help protect your information, should you feel it appropriate to do so.

September 23, 2024

Custom engineered foam manufacturer, Rogers Foam Corporation (RFC), suffered a cyberattack last month that included data exfiltration.
“RFC is writing to inform you of a recent data security incident that may have resulted in the potential unauthorized access and acquisition of your sensitive personal information,” the company said in a letter to victims. “We are providing you with details about the incident, steps we are taking in response, and resources available to help you protect against the potential misuse of your data. RFC takes the protection and proper use of your personal information very seriously, and we sincerely apologize for any inconvenience this may cause.
“On September 23, 2024, RFC detected suspicious activity in its network environment. Upon discovery of this incident, RFC promptly took steps to secure its network and engaged a specialized cybersecurity firm to investigate the nature and scope of the incident. RFC’s investigation determined that an unauthorized third-party potentially accessed and acquired certain files and data stored within our network,” the company said.

August 8, 2024

Diversified manufacturer, Saeilo Enterprises Inc., discovered it suffered a ransomware attack this past August and after an investigation, it is now letting victims know about personal information the attackers stole.
“Saeilo Enterprises is writing to inform you of a recent ransomware cyberattack that may have exposed your personal information,” the company said in an advisory. “We take the security of your personal information seriously and want you to know what happened, what data may have been affected, and what you can do to help protect yourself.
“On August 8, 2024, we discovered that files on some of our servers, as well as the servers of our brands and subsidiaries – Kahr Arms, Magnum Research, Tommy Gun, and Thompson/Auto Ordinance – had been subject to a ransomware cyberattack.”

May 22, 2024

Farmers Branch, Texas-based Varsity Brands suffered a cyberattack affecting over 65,000 of its customers on May 22 which it discovered two days later, and just sent out a notice Monday to victims of the incident.
“We are writing to inform you that some of your personal information was recently impacted when we experienced a security incident,” said the letter to the victims.
“On May 24, 2024, Varsity Brands identified unusual activity on our systems. Upon detection, we promptly took steps to stop the activity and took certain systems offline. An investigation launched with assistance from external cybersecurity experts. We also notified law enforcement,” the letter said.

October 2, 2024

For the second time in three months, physical security giant, ADT Inc. reported an “unauthorized activity” on its network, this time gaining access using compromised credentials obtained through a third-party business partner.
The result was the attack forced the Boca Raton, Florida-based company to shut down various components and mitigate the unauthorized access.
The company said it promptly took steps to shut down the unauthorized access, notified the third party its systems suffered compromise, launched an investigation, and implemented counter measures intended to safeguard the company’s information technology assets and operations, the company said in an October 2 8-K advisory to the Securities and Exchange Commission (SEC).

August 3, 2024

Physical security giant, ADT Inc., fell victim to a cyberattack where attackers purloined customer data, the company said in an 8-K report to the Securities and Exchange Commission (SEC).
“ADT recently experienced a cybersecurity incident during which unauthorized actors illegally accessed certain databases containing ADT customer order information,” the company said in the report filed with the SEC August 3. “After becoming aware of the incident, the company promptly took steps to shut down the unauthorized access and launched an investigation, partnering with leading third-party cybersecurity industry experts.”