The safety certification provider company Underwriters Laboratories was targeted in a ransomware attack. The company immediately took the precautionary steps and shut down its computer systems to contain the attack and hired security experts to investigate the incident. The company decided not to pay the ransom and restore its system from backups.

UL LLC, better known as Underwriters Laboratories, suffered a ransomware attack after the attackers encrypted its servers and caused them to shut down systems. The attack made it impossible for its employees to perform their jobs. UL shut down the system and told employees not to contact the threat actors or visit any sites related to the ransomware operation. UL also decided not to pay the ransom and started restoring from backups instead.

The Maine Office of the Attorney General disclosed a data breach affecting Underwriters Laboratories Inc. (UL Inc.) on May 26, 2021, after detecting unauthorized access on April 25, 2021. The incident stemmed from an external system breach (hacking), compromising sensitive personal data. A total of 5,994 individuals were impacted, including 25 Maine residents. The exposed information included Social Security numbers (SSNs), a high-value target for identity theft and financial fraud. While the breach did not involve ransomware or a full-scale operational disruption, the exposure of SSNs poses long-term risks, such as fraudulent credit applications, tax fraud, and unauthorized access to financial accounts. The breach underscores vulnerabilities in UL Inc.’s cybersecurity defenses, particularly against external threats targeting personally identifiable information (PII). No immediate financial losses or systemic outages were reported, but the reputational damage and potential regulatory scrutiny (e.g., under data protection laws) remain significant concerns. The company likely faced obligations to notify affected individuals and implement remedial measures, such as credit monitoring services.