Analog Devices Discloses Data Breach Amid Emerging Extortion Threat Analog Devices, Inc. (ADI), a Massachusetts-based semiconductor manufacturer with $12 billion in annual revenue and 24,000 employees, has reported a data breach following unauthorized access to its systems on June 23, 2026. The company, which designs chips for industrial, automotive, and communications sectors, detected the intrusion and launched an investigation with external cybersecurity experts. While Analog Devices confirmed that hackers exfiltrated certain files, the company has not disclosed the nature of the compromised data. No operational disruptions were reported, and there is no evidence the stolen files have been leaked or misused. The incident is not expected to materially impact the company’s financial or operational standing. Separately, on July 26, 2026, Analog Devices acknowledged public reports of a second, unrelated cybersecurity incident likely tied to the extortion group ExfilSquad. The group, known for data theft rather than ransomware, previously claimed to have stolen 570,000 records from the company. However, Analog Devices’ name no longer appears on ExfilSquad’s leak site, and security researchers, including SOCRadar, have questioned the validity of some of the group’s claims. ExfilSquad’s victim list has included high-profile targets such as Microsoft, Atlanta, Houston, and the UK Department of Education. Analog Devices is currently assessing the scope and potential impact of the second incident. Further details remain pending as the investigation continues.

Analog Devices Confirms Cyberattack with Data Theft in June 2023 Analog Devices, Inc. (ADI), a leading semiconductor manufacturer, disclosed a cyberattack on June 23, 2023, in which unauthorized actors accessed company systems and exfiltrated files. The breach was detected the same day, prompting an immediate incident response, including engagement with external cybersecurity experts and notification of law enforcement. While ADI confirmed data theft, it did not identify the threat actor, specify the intrusion method, or detail which systems were compromised. The investigation remains ongoing, with the company acknowledging that "certain files" were stolen but unable to determine their full nature or scope whether they contained employee, customer, supplier, intellectual property, financial, or operational data. As of the filing, there was no evidence the stolen data had been publicly released or used for fraud. ADI stated that the incident did not disrupt operations and is unlikely to materially impact its business or financial condition. However, this assessment could change if sensitive proprietary, regulated, or partner-related data is confirmed among the stolen files. For semiconductor firms, such breaches pose long-term risks, including competitive, security, and supply-chain vulnerabilities. In a separate disclosure, ADI referenced a "disparate" cybersecurity matter reported publicly on July 26, 2023, though details remain unclear. The company is assessing the validity and potential impact of these reports, which may involve a data leak or unauthorized access unrelated to the June incident. The attack highlights the persistent targeting of semiconductor and advanced-technology firms by cybercriminals and espionage actors seeking valuable intellectual property. ADI has not provided a timeline for completing its investigation or releasing further technical details.