Synopsys Data Breach Exposes Sensitive Personal and Corporate Data in Ransomware Attack Synopsys, Inc., a leading provider of electronic design automation (EDA), semiconductor intellectual property, and software security solutions based in Sunnyvale, California, suffered a significant data breach following a ransomware attack. The incident, claimed by the cybercriminal group Arkana Security on June 6, 2025, involved the theft of sensitive corporate and personal data, which the attackers threatened to publish on the dark web. The breach was officially disclosed to the Massachusetts Attorney General on April 2, 2026, with at least four individuals in the state confirmed as affected. Exposed data includes a wide range of highly sensitive information, such as: - Personal identification: Driver’s licenses, government ID numbers, Social Security numbers, dates of birth, and full names - Financial data: Bank account numbers, financial account details, and other financial records - Medical information: Health insurance details and medical records - Corporate data: Contracts, billing receipts, EDA files, research, intellectual property, and employee records The law firm Shamis & Gentile P.A. is investigating potential legal claims on behalf of affected individuals, citing possible compensation for damages related to identity theft, financial losses, and the time spent mitigating the breach’s impact. The incident underscores the growing threat of ransomware attacks targeting both personal and proprietary corporate data.