Microchip Technology confirms cyberattack resulted in stolen data

TLDR:

Key Points:

• Microchip Technology confirmed data was stolen in a cyberattack.
• The cyberattack was claimed by the Play ransomware gang.

In an August cyberattack, American semiconductor supplier Microchip Technology Incorporated had employee information stolen from compromised systems. The chipmaker, with around 123,000 customers across various sectors, disclosed the attack on August 20 and reported that its manufacturing facilities were impacted. Despite the data breach, operations have been restored, and customer orders are being processed. While employee data was stolen, there is no evidence of customer information being compromised.

The Play ransomware gang claimed responsibility for the attack on Microchip Technology’s systems, threatening to leak stolen data if not addressed. This ransomware group has been known for double-extortion schemes, targeting organizations globally. Notable victims of the Play ransomware gang include Rackspace, Arnold Clark, and the City of Oakland.

Microchip Technology is still evaluating the extent of the cyberattack with outside cybersecurity experts and working on restoring impacted IT systems. Despite the ongoing investigation, the company is continuing its operations and shipping products to customers. The Play ransomware gang has partially leaked the stolen data and demanded a ransom to prevent further leaks.