Data I/O reports ransomware attack disrupts operations; SEC filing indicates ongoing investigation

Data I/O, a major electronics manufacturer whose customers include Amazon, Apple, Google and Microsoft, disclosed on Thursday that a ransomware infection affected its systems beginning August 16 and continues to disrupt business operations. The disclosure was made in a Form 8-K filed with the U.S. Securities and Exchange Commission here.

According to the filing, the attack “temporarily impacted the Company’s operations, including internal/external communications, shipping, receiving, manufacturing production, and various other support functions.” The company said some functions have been restored while others remain offline, and there is no timetable for a full fix. An investigation is ongoing.

Data I/O said it promptly activated its response protocols, secured its global IT systems and implemented containment measures, including taking certain platforms offline, and engaged cybersecurity experts to support the recovery and investigation.

In its filing and public statements, the company did not immediately answer whether customer data was stolen during the intrusion. At press time, no group had claimed responsibility, and Data I/O has not been listed on data‑leak sites.

The company’s own materials describe its role serving major automotive and industrial firms, noting that “Leading global automotive companies trust Data I/O’s systems to correctly program engine instrument clusters, control units, and braking systems,” and that “Top industrial controls and internet-of-things manufacturers use Data I/O’s solutions to embed firmware and secrets into their products to ensure they are secured and boot-up during manufacturing.” For more on Data I/O’s offerings, visit the company’s site here.

Analysts say ransomware incidents are increasingly affecting industrial and critical infrastructure organizations, underscoring the vulnerability of operational technology environments. The Data I/O incident highlights the ongoing risk to manufacturers that rely on integrated hardware and software supply chains.