Analog Devices Breach: Chip Maker Says Data Exfiltrated

Executive Summary

Analog Devices, a Massachusetts-based semiconductor manufacturer with a market cap exceeding $178 billion, disclosed to the U.S. Securities and Exchange Commission (SEC) that intruders gained unauthorized access to its systems and exfiltrated files. The breach, identified on June 23, 2026, is still under investigation, and the company has not yet determined the full scope of the data loss. While Analog Devices stated it does not expect a material impact on its business, the disclosure comes amid claims from the ransomware group ExfilSquad that it stole more than 570,000 customer records.

Technical Analysis

In a filing with the SEC on July 29, 2026, Analog Devices reported that on June 23 it detected "unauthorized access" to certain systems and immediately activated its incident response plan. The company engaged outside cybersecurity experts and began coordinating with law enforcement. During the investigation, it discovered that "certain files" had been exfiltrated, but the exact contents and volume of the stolen data remain unknown.

Analog Devices stated that, to its knowledge, the data has not been publicly released or used for fraudulent purposes. However, the company also noted that it was informed of a separate "disparate cybersecurity matter" on July 26, which it claims is not connected to the June intrusion. The firm is currently assessing the validity, scope, and potential impact of this second incident.

The July 26 notification may be linked to public claims by the ransomware group ExfilSquad, which asserted it had stolen more than 570,000 records related to Analog Devices customers. An Analog Devices spokesperson did not respond to questions about these ransomware claims. The company's SEC filing does not mention ExfilSquad or provide additional details about the second incident.

Analog Devices specializes in chips and circuits for data conversion and signal processing, making it a significant player in the semiconductor industry. The company reported over $11 billion in revenue last year. The breach follows a pattern of cyberattacks targeting semiconductor firms, including the Play ransomware attack on Microchip Technology in 2024 and an incident at Applied Materials in 2023. In March, Trio-Tech International reported a ransomware attack on its Singapore subsidiary, and Foxconn dealt with a cyberattack in May that affected production at several American factories.

Mitigations & Recommendations

Given the ongoing investigation and the possibility of a second incident, defenders should monitor for any public disclosure of stolen data, especially if ExfilSquad follows through on its claims. Organizations in the semiconductor and adjacent industries should review their own security postures, particularly around network segmentation and access controls, given the sector's attractiveness to ransomware groups. Analog Devices customers should remain vigilant for phishing or social engineering attempts that might leverage stolen contact information, and consider implementing additional authentication measures for accounts associated with the company.