Incident · Unknown

Key Tronic Corporation · KTCC

Information TechnologyUSAIncident May 6, 2024Filed June 5, 2024
Impact score
Business continuity
Partial
Insurance involved
Not disclosed
Filing
8-K · 1.05

Breach taxonomy

UnknownMalwareRevenue ProcessCost ProcessBiz Interruption

Summary

Key Tronic Corporation detected a cybersecurity incident on May 6, 2024, involving unauthorized access to its IT systems. The intrusion disrupted business applications supporting corporate functions and manufacturing activities at facilities in the US and Mexico. The company engaged third-party cybersecurity experts and notified law enforcement; operations were being restored as of the filing date.

Tagging rationale

ThreatUnknown

Filing does not attribute the incident to a specific actor → UNKNOWN.

MethodsMalware

Filing describes unauthorized access to IT systems disrupting business operations without specifying ransomware or exfiltration; classified as general malware/intrusion.

AssetsRevenue ProcessCost Process

Unauthorized access disrupted business applications supporting manufacturing activities in the US and Mexico, affecting both revenue-generating and cost-generating business processes.

EffectsBiz Interruption

Filing states the intrusion disrupted business applications supporting corporate functions and manufacturing activities at multiple facilities → BIZ-INTERRUPTION.

Business continuityPartial

Filing notes the company was working to restore operations with third-party experts, implying partial restoration in progress as of filing date.

Impact

Disruption to manufacturing operations at US and Mexico facilities; no data exposure or ransom confirmed; scope limited to one company's operations → score 2.

InsuranceNot disclosed

Filing makes no mention of insurance → null.

Read the original SEC filing excerpt
Item 1.05 Material Cybersecurity Incidents. On May 6, 2024, Key Tronic Corporation (the Company) became aware of a cybersecurity incident involving unauthorized access to the Company's information technology (IT) systems. The Company promptly took steps to contain the incident and engaged third-party cybersecurity experts and notified law enforcement. The Company is continuing to investigate the incident, assess any impact, and restore operations. The incident has caused some disruption to business applications supporting corporate functions and some of the Company's manufacturing activities in the United States and Mexico. The Company is working diligently to restore normal operations as quickly as possible.