Manufacturing

September 29, 2025

Everett, Washington-based test, measurement, and diagnostic equipment maker Fluke Corporation suffered a cyberattack as a result of a vulnerability in a third-party application.
“We are writing to inform you that a criminal actor detected and exploited a vulnerability within an established third-party business application, which resulted in a data security incident at Fluke Corporation,” the company said in a notice to victims. “The incident involved your personal information, and this letter provides details about what happened, what information of yours may have been involved, what we are doing in response, and what resources are available to you.”
“On September 29, 2025, we learned that a criminal actor exploited a vulnerability in a third-party application used by us and was able to access a limited segment of our network,” the company said in a notice to the 18,517 victims of the attack. “This vulnerability also impacted various other companies that use the same software across different industries.”

March 24, 2026

Mercerville, New Jersey-based flooring manufacturer, New Congol LLC dba New Congoleum, suffered a cyberattack in March where personally identifiable information ended up stolen in the hack.
“On March 24, 2026, we discovered unusual activity in our network and immediately began investigating the matter,” New Congoleum said in a notice to victims. “We also engaged independent cybersecurity experts to assist with the process of ensuring our network was secure and identifying whether any personal information was involved.”
New Congoleum’s investigation determined attackers stole personal information involved in the incident.

March 16, 2026

Niles, Illinois-based clothing manufacturer and retailer Up Brands, LLC doing business as Revolution Dancewear suffered a cyberattack in March last year where personally identifiable information ended up stolen in the hack and they are just now informing victims of the attack.
“Revolution Dancewear learned that an unauthorized party gained access to a limited number of Revolution Dancewear internal systems from on or about March 16, 2025, to on or about April 3, 2025.”
Upon learning of this attack, Revolution Dancewear immediately launched an investigation and contained and secured the Revolution Dancewear network environment.

February 26, 2026

Portland, Oregon-based manufacturing design and management provider David Evans Enterprises, Inc. suffered a cyberattack in February where personally identifiable information ended up stolen in the hack.
“On February 26, 2026, we detected potentially suspicious activity on a limited portion of our computer network,” the company said in a notice to victims. “In response, we immediately began an investigation with the assistance of third-party specialists.”
During the e investigation, David Evans found threat actors gained access to certain files without authorization between February 26 and February 27.

February 17, 2026

Alpharetta, Georgia-based metal maker and distributor, Kloeckner Metals Corporation, suffered a cyberattack in February where personally identifiable information ended up stolen in the hack.
“On February 23, 2026, Kloeckner identified unusual activity within their network,” the company said in a notice to victims. “Upon identifying the activity, steps were immediately taken to secure the network and an investigation commenced.”
Kloeckner hired a cybersecurity firm that has assisted other companies in addressing similar situations. To that end, the investigation determined there was unauthorized access to the network between February 17 and February 23. That is when attackers took copies of certain files.

July 25, 2025

Bethlehem, Pennsylvania-based metal roll forming maker Hygrade Metal Moulding Manufacturing Corp. suffered a cyberattack in July last year where personally identifiable information ended up stolen from victims in the hack.
“Hygrade observed unauthorized access to our network,” the company said in a notice to victims. “Upon learning of the issue, we immediately secured our network and commenced a prompt and thorough investigation.”
As part of its investigation, Hygrade said it worked closely with external cybersecurity professionals experienced in handling these types of incidents.
Additionally, following the completion of its investigation, on March 13, the company learned between July 25 and July 27 certain files containing a limited amount of your personal information may have been subject to unauthorized access and/or acquisition.

February 1, 2026

West Wareham, Massachusetts-based millwork manufacturer, Master Millwork, LLC suffered a cyberattack in February affecting victims’ personally identifiable information.
“On February 4, 2026, Master Millwork discovered suspicious activity on its network and immediately began an investigation,” said a notice the company sent out to victims. “The investigation determined there was unauthorized access to certain information between February 1, 2026 and February 5, 2026.”
To that end, Master Millwork conducted a review to determine the types of information potentially affected and to whom it belonged. Just over one month later, on March 13, Master Millwork completed its review.