Breach taxonomy
Summary
On April 27, 2025, Masimo Corporation identified unauthorized activity on its on-premise network, immediately activated incident response protocols, and engaged third-party cybersecurity professionals for investigation and remediation. Manufacturing, order-taking, distribution, and shipping operations were disrupted but had substantially recovered by the May 27 update filing, with manufacturing at near full capacity and critical systems fully operational. The company holds cybersecurity insurance and expected the majority of out-of-pocket remediation costs to be covered. Filed under Item 8.01; this is an update filing on the originally reported May 6, 2025 incident.
Tagging rationale
ThreatUnknown
Filing does not attribute the incident to a specific actor or group -> UNKNOWN.
MethodsMalware
Filing describes 'unauthorized activity on the Company's on-premise network' requiring incident response and containment; no explicit mention of ransomware or data exfiltration -> MALWARE (general, non-ransomware).