Electronics Manufacturer Data I/O Suffers Ransomware Breach

Data I/O Corporation, a well-known electronics firm that specialises in device programming and security provisioning solutions, revealed a ransomware attack that penetrated its internal IT infrastructure. The incident was detected on 16 August 2025, prompting an immediate activation of the company’s incident response protocols. According to the Form 8-K filing with the U.S.

Securities and Exchange Commission on 27 August 2025, the breach involved unauthorised access to certain systems, leading to operational disruptions. Containment measures included isolating affected systems and taking critical platforms offline to prevent lateral movement, with external cybersecurity specialists engaged to investigate the attack vector and potential indicators of compromise.

Preliminary assessments suggest entry points such as phishing, unpatched vulnerabilities, or supply chain compromises, though the exact method remains under scrutiny, and Data I/O has committed to notifying impacted stakeholders as required by GDPR or U.S. state breach notification laws. While some functions have been partially restored, the full remediation timeline remains uncertain, and the company warns of potential costs from cybersecurity consultants, legal advisers, and system restoration.