Manufacturing

June 7, 2025

Fashion industry giant and New York, New York-based Louis Vuitton North America Inc. suffered a cyberattack earlier this summer where an attacker was able to gain access to the network and make off with personally identifiable information.
“On July 2, 2025, Louis Vuitton became aware of a cybersecurity incident,” the company said in a letter to its victims. “Louis Vuitton promptly engaged leading third-party cybersecurity experts and took steps to investigate the incident. The investigation determined that an unauthorized party gained access to a database containing client data on June 7, 2025.”
Louis Vuitton said in the letter they were able to contain the incident.

June 18, 2025

Lexington, Kentucky-based heavy equipment maker, LBX Company LLC, responded to a stolen laptop computer that had unencrypted personally identifiable information available.
LBX, a subsidiary of Japanese conglomerate Sumitomo Heavy Industries, discovered an incident on June 18, where a company-issued laptop computer ended up removed from an employee’s vehicle.
“Although this device was password-protected, LBX determined there was unencrypted data saved to the laptop, which may have included your personal information,” the company said in a letter to victims of the attack. “This data could potentially be accessed by an unauthorized person if the person was able to defeat the password protection and gain access to the laptop.”

July 30, 2025

Brecksville, Ohio-based Lumitex, Inc., a designer and manufacturer of light delivery systems for multiple industry sectors, suffered a cyberattack last month and is in the process of letting victims know.
The breach occurred July 30, when Lumitex experienced an external system breach due to a hacking incident.
“Upon becoming aware, Lumitex began an investigation into the scope and nature of the activity, retained legal counsel and third-party forensic specialists to investigate the incident,” the company said in a letter to its victims. The company also cooperated with federal law enforcement.

April 2, 2025

Exton, Pennsylvania-based PAC Strapping Products, Inc. suffered from a ransomware attack they discovered this past April and now four months later the company is letting victims know some of the details from the incident.
PAC Strapping Products said it experienced a ransomware incident which may have affected personal information from the victims of the attack.
“On or about April 2, 2025, we discovered a ransomware incident that locked us out of certain devices on our system,” the company said in a letter to victims of the attack. “Based on this activity, we contacted our IT team to investigate. The IT team promptly stopped the suspicious activity and reset all user passwords as a precaution. We also engaged IT professionals to perform a scan and analysis of our system.”

January 26, 2025

Fashion couture giant, House of Dior, suffered a cyberattack in January it discovered in May and then started notifying victims in July.
“We take the security of your personal information very seriously, Dior said in a notice to victims. “We are writing to let you know about a recent cybersecurity incident that impacted a database we use to hold your personal information.”
“On May 7, 2025, we identified a potential cybersecurity incident. We promptly conducted an investigation, supported by leading third-party cybersecurity experts. Our investigation determined that an unauthorized party was able to gain access to a Dior database that contained information about Dior clients on January 26, 2025,” the letter said.
The breach involved an exploit through a Salesforce-connected system.

February 12, 2025

Florence, Oregon-based hydraulic component maker, Top Hydraulics, Inc., discovered a cyberattack earlier in July affecting data entered in February.
Top Hydraulics discovered unauthorized access to payment card information entered on its website initially on May 21, affecting data entered between February 12 and May 21, the company said in an advisory.
In further evidence the attacker possibly was lurking on the network, the company found other unauthorized access in June.

June 2, 2025

State College, Pennsylvania-based PanOptimization LLC suffered a cyberattack where employees at the advanced manufacturing firm had some personally identifiable information stolen.
“We are writing to you because of an incident involving access to information associated with your employment records at PanOptimization LLC,” the company said in a letter to victims of the incident. “Although we are unaware of any actual misuse of your information, we are providing notice to you and other potentially affected employees about the incident, and about tools you can use to protect yourself against possible identity theft or fraud.”
On June 2, one of the company’s Microsoft exchange accounts ended up compromised. The threat actor intercepted login credentials via a phishing attack and temporarily gained access to one email account.

June 2, 2025

State College, Pennsylvania-based PanOptimization LLC suffered a cyberattack where employees at the advanced manufacturing firm had some personally identifiable information stolen.
“We are writing to you because of an incident involving access to information associated with your employment records at PanOptimization LLC,” the company said in a letter to victims of the incident. “Although we are unaware of any actual misuse of your information, we are providing notice to you and other potentially affected employees about the incident, and about tools you can use to protect yourself against possible identity theft or fraud.”
On June 2, one of the company’s Microsoft exchange accounts ended up compromised. The threat actor intercepted login credentials via a phishing attack and temporarily gained access to one email account.

April 17, 2024

Houston, Texas-based Bray International, Inc. suffered a “sophisticated cyber incident” over one year ago and after an investigation, it is now letting victims know about the attack.
A global valve manufacturer and supplier, Bray worked with third-party forensic specialists to complete a thorough investigation.
In the investigation, researchers found an unauthorized actor gained access to Bray’s network between April 17, 2024, and April 25, 2024, and may have viewed or taken certain files.