Analog Devices, Inc. (NASDAQ: ADI) has disclosed a data breach in a filing with the U.S. Securities and Exchange Commission, revealing that an unauthorized party accessed certain company systems and exfiltrated files.
The Massachusetts-based semiconductor maker said it identified the unauthorized access on June 23, 2026, and immediately activated its incident response protocols. External cybersecurity experts were engaged to assist with containment and investigation. The company has not disclosed what type of data was stolen.
Analog Devices designs analog, mixed-signal, power management, and digital signal processing chips used across industrial automation, automotive systems, communications infrastructure, healthcare equipment, aerospace, and data centers. The company employs roughly 24,500 people and generated more than $11 billion in revenue in 2025, ranking it among the largest analog semiconductor suppliers globally.
According to the SEC filing, Analog Devices has no indication that the stolen data has been leaked online or misused for fraud, though it says it will continue monitoring for such activity. Law enforcement has been notified, and the company plans to inform affected individuals and regulators as required.
The company stated that its business operations were not disrupted by the incident and that it does not expect the breach to have a material impact on its operations or financial condition.
Separate Extortion Claim Under Review
Notably, Analog Devices disclosed that it became aware of a separate, unrelated cybersecurity matter on July 26 following public reports, which it is currently assessing for validity and scope. This appears to reference claims from an extortion group calling itself ExfilSquad, which briefly listed Analog Devices on its data leak site and claimed to have stolen roughly 570,000 records.
ExfilSquad specializes in data theft rather than file-encrypting ransomware. Its leak site has also named other alleged victims, including Microsoft, the cities of Atlanta and Houston, and the UK Department of Education, though analysis from threat intelligence firm SOCRadar suggests some of the group’s claims may be exaggerated or fabricated.
Analog Devices no longer appears on ExfilSquad’s leak site. The reason for the delisting is unclear, though threat actors commonly remove victims once ransom negotiations begin. It remains unconfirmed whether the ExfilSquad claim is connected to the breach described in the SEC filing, and no other extortion or ransomware group has claimed an attack against the company.