Manufacturing

November 18, 2025

Clothing retailer Under Armour is in the process of investigating a data breach where attackers stole customers’ email addresses and other personal information.
While there are no signs yet attackers stole any passwords or financial information nor have they abused the personal information from the November attack.
The breach occurred late last year, and affected 72 million email addresses, according to The Associated Press report citing information by the cybersecurity website Have I Been Pwned.

October 3, 2025

Medina, New York-based industrial textile manufacturer BMP America, Inc. suffered a cyberattack in October and is now letting victims know about the attack where personally identifiable information ended up stolen in the hack.
“On October 3, 2025, we discovered unusual activity on our network and immediately began an investigation,” the company said in a letter to victims. “The investigation determined that a limited amount of information was subject to unauthorized access between October 2, 2025 and October 3, 2025.”
BMP America conducted a review of the stolen information to determine the types of information ended up affected and to whom that information belonged.

July 22, 2025

Waltham, Massachusetts-based Nova Biomedical Corp. suffered a “sophisticated cybersecurity attack” where the threat actor “deployed malware” in July and is now informing victims their personally identifiable information ended up stolen in the attack.
“On July 22, 2025, Nova experienced a sophisticated cybersecurity attack that disrupted Nova’s operations,” the company said in a letter to victims. “Nova immediately launched an investigation with the assistance of leading cybersecurity experts. Through Nova’s investigation, Nova determined that an unauthorized actor accessed Nova’s electronic infrastructure and deployed malware. Nova also coordinated with law enforcement.”
Nova’s investigation included a review and analysis of impacted data on its systems.

December 1, 2025

Biddeford, Maine-based Haley’s Metal Shop, Inc. suffered a business email compromise cyberattack in December where personally identifiable information ended up stolen in the hack.
“On December 1, 2025, Haley’s Metal Shop, Inc. identified and addressed an email phishing incident associated with one employee’s email account,” the company said in a notice to victims. “Upon identifying the activity, Haley’s Metal Shop promptly took steps to secure the account and began an investigation.”
As a result, the investigation determined an unauthorized actor accessed the employee’s email account only on December 1. Haley’s Metal Shop reviewed the emails and attachments in the email account. On January 23, the company found they contained the name, Social Security number, driver’s license number, and/or financial account information.