Analog Devices, Inc., a leading U.S. semiconductor manufacturer specializing in analog, mixed-signal, and digital signal processing technology, has confirmed a cybersecurity incident that led to unauthorized access to its internal systems and the exfiltration of company files.
The Massachusetts-based chipmaker disclosed the security incident following an initial intrusion detected in late June 2026.
According to official filings, Analog Devices detected unauthorized activity across certain company systems on June 23, 2026. Upon discovering the intrusion, the company activated its emergency response protocols, engaged external cybersecurity specialists to assist with containment and forensic investigation, and notified law enforcement authorities.
Analog Devices Confirms Data Breach
Despite the unauthorized network access, Analog Devices emphasized that its core business operations remained uninterrupted at any point during the incident. Maintaining operational continuity is particularly critical given the company’s key role in supplying essential chips across automotive, industrial, communications, and defense sectors.
Organizations monitoring similar enterprise data breach trends recognize that rapid containment and forensic auditing are vital for preventing broader operational disruption.
The company publicly confirmed the incident in an official SEC Form 8-K filed with the U.S. Securities and Exchange Commission on July 29, 2026. Ongoing forensic investigations confirmed that certain files were exfiltrated from the affected systems.
While Analog Devices continues to analyze the precise scope and nature of the compromised records, it stated that it is currently unaware of any stolen data being publicly released or used for fraudulent purposes.
The company pledged to notify affected individuals and regulatory bodies as required under applicable law. Based on its current assessment and containment measures, ADI does not believe the incident is reasonably likely to have a material impact on its financial condition or overall operations.
Compliance teams tracking regulatory security reporting guidelines note that SEC disclosure rules enforce strict transparency standards for public enterprises.
Days prior to the SEC filing, on July 26, 2026, a ransomware and extortion group calling itself ExfilSquad listed Analog Devices on its leak site.
The group claimed to have stolen approximately 570,000 customer records containing personally identifiable information (PII) and physical home addresses, threatening public release unless its ransom demands were met.
However, Analog Devices has not attributed the June intrusion to ExfilSquad, and no independent evidence currently verifies the group’s claims regarding the stolen data.
| Incident Reference | Detection / Awareness Date | Operational Status | Status & Claimed Exposure |
| June Cyberattack (Primary) | June 23, 2026 | Fully Operational | File exfiltration confirmed; forensic scope under review |
| ExfilSquad Extortion Claim | July 26, 2026 | Unverified | Group claims 570,000 PII customer records stolen |
| Secondary Public Incident | July 26, 2026 | Under Assessment | Reviewing validity of separate public report |
In the same SEC disclosure, Analog Devices noted that on July 26, 2026, it became aware of public reports regarding a second, distinct cybersecurity issue unrelated to the June breach. The company is actively assessing the validity, scope, and potential impact of this second matter.
Because Analog Devices provides critical component hardware across global technology markets, security researchers are monitoring the situation for potential downstream supply chain security implications.
The company pledged to issue further notifications to affected parties as its forensic investigation concludes.
Strengthen Your SOC by Accelerating Threat Detection & Rapid Investigations. -> Integrate ANY.RUN With Your SOC Now.
