March 7, 2025
In early March 2025, Crystal D, a U.S. supplier of crystal awards and gifts, experienced a cyberattack that disrupted its operations, knocking out communications and internal systems. The attack caused phone and email systems to go offline and interrupted order processing and scheduled shipments for a number of days. Approximately 3% of orders were delayed during multi-day production shutdown.
February 25, 2025
The wholesaler Stürmer Maschinen became the target of a ransomware attack. The ransomware gang Lynx claim to have subtracted a data set of 800 gigabytes. It is unclear exactly which data it is. There is no information on the ransom claim and deadline. Stürmer Maschinen has not yet officially commented on the incident.
February 10, 2025
Italian furniture company Alf DaFrè was hit by a ransomware attack. The hackers encrypted company data and disabled computers and machinery, affecting the production chain. An estimated 15 per cent of the company’s IT infrastructure was compromised. The company decided not to pay the ransom. It shut down the entire IT system to avoid further damage.
Production was shut down and employees were laid off for 8 days.
September 12, 2025
Camas, Washington-based marine electronics manufacturer, Furuno U.S.A., Inc. suffered a ransomware attack in September where threat actors made off with personally identifiable information during the hack.
“On September 15, 2025, Furuno U.S.A., Inc. identified unauthorized access to certain of its computer systems,” Furuno said in an advisory. “Upon identifying the incident, Furuno immediately took steps to secure its environment and launched an investigation. A third-party cybersecurity firm was engaged to assist.”
Through the investigation, Furuno found an unauthorized actor viewed and/or obtained certain files stored on its computer servers between September 12 and September 15.
October 17, 2025
High-end audio equipment maker, McIntosh Laboratory, Inc. suffered a cyberattack in October which disrupted access to various systems within the network.
“On October 21, 2025, McIntosh detected suspicious activity and experienced a disruption of access to certain of our digital systems,” the company said in a notice to victims. “In response, we took immediate steps to secure our network and engaged forensic experts to investigate.”
Based on the investigation, McIntosh found the attacker accessed and acquired certain data between October 17 and 19.
October 6, 2025
Chelmsford, Massachusetts-based HydroServe LLC, doing business as Gustavo Preston Company, suffered a cyberattack in October where personally identifiable information ended up stolen in the hack.
“On October 14, 2025, Gustavo Preston identified suspicious activity on certain computer systems,” according to a letter to victims of the attack. “Gustavo Preston immediately took steps to secure its systems and launched an investigation into the nature and scope of the activity.”
As a result of its investigation, Gustavo Preston found an unknown actor gained access to certain computer systems between October 6, 2025 and October 14, 2025 and was able to view or download certain data.
August 5, 2025
West Lafayette, Indiana-based Inotiv, Inc., a medical researcher and maker of products, suffered a cyberattack in August and is now letting victims know their personally identifiable information ended up stolen.
Inotiv, Inc. is a contract research organization that provides nonclinical and analytical drug discovery and development services and research models and related products and services.
“On August 5, 2025, we detected unusual activity on certain Inotiv systems and promptly initiated an investigation,” the company said in a notice to victims of the attack. “On August 8, 2025, we determined that this unusual activity was due to unauthorized actions by a threat actor.”
April 11, 2021
Westford, Massachusetts-based BTU International, a thermal processing equipment provider, suffered a ransomware attack on April 11, 2021. DarkSide ransomware group took credit for the attack.
October 2, 2025
Norwalk, California-based cabinet maker, Cabinets 2000, suffered a ransomware attack in October.
In the Cabinets 2000 hack, the ransomware group called blackshrantac took credit for the attack.
“On October 15, 2025, we learned that certain files on the computer network were locked by a computer virus,” the company said in a letter to victims. “In response, we took our systems offline and securely restored them, and we reviewed this matter further to determine what occurred.”
The company learned some files on the computer network ended up copied without permission between October 2 and 3.
September 2, 2025
Johnston, Rhode Island-based organic personal care products maker, Pure Haven, LLC, suffered a cyberattack last month where personally identifiable information ended up stolen by threat actors.
The company identified potentially suspicious activity related to an internal account on September 2.
“Upon discovery we took immediate action to address and investigate the activity, including performing a password reset and engaging third-party specialists to assist in conducting a full investigation,” the company said in a letter to victims of the attack. “Through our investigation, on or around September 5, 2025, we determined that an unauthorized individual may have accessed or acquired certain information on September 2, 2025.”