Pierluigi Paganini
January 28, 2025
ENGlobal disclosed a ransomware attack that occurred in November, in a SEC filing the company confirmed that threat actors gained access to personal information.
On November 25, ENGlobal experienced a ransomware attack and took certain systems offline to contain the threat. In early December, the company notified the SEC that data on its systems had been encrypted during the attack but did not report any data exfiltration.
“The preliminary investigation revealed that a threat actor illegally accessed the Company’s information technology (“IT”) system and encrypted some of its data files. Upon detecting the unauthorized access, the Company immediately took steps to contain, assess and remediate the cybersecurity incident, including beginning an internal investigation, engaging external cybersecurity specialists, and restricting access to its IT system.” reads the FORM 8-K filed with SEC.
“Based on the information available to the Company as of the date hereof, the Company believes that the incident has not had a material impact and is not reasonably likely to have a material impact, on the Company, including the Company’s financial condition and results of operations, except as disclosed herein.”
ENGlobal has not disclosed information about the ransomware family that infected its systems, and, as of this writing, no known ransomware group has claimed responsibility for the attack.
The company plans to notify affected individuals and regulatory agencies as required by law. It also confirmed that systems have been fully restored, operations are back to normal, and the attacker has been removed from the network.
The company states that the security breach had and is not expected to have a material impact on its operation, including its financial condition and results of operations.
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, ransomware)
