Microchip Technology cut manufacturing output after August 2024 cyberattack

Microchip Technology Incorporated, the Arizona based semiconductor manufacturer, disclosed a cyberattack in a Form 8-K filed with the Securities and Exchange Commission on August 20, 2024. The company said it had detected potentially suspicious activity in its information technology systems on August 17 and determined two days later that an unauthorized party had disrupted its use of certain servers and some business operations.

Microchip isolated the affected systems, shut down parts of its environment and engaged external cybersecurity advisers. The operational effect was direct. The filing stated that certain of the company's manufacturing facilities were operating at less than normal levels and that its ability to fulfill orders was impacted.

At the time of the disclosure the company said it had not determined whether ransomware was involved, whether data had been taken, or whether the incident was reasonably likely to have a material effect on its financial condition or results of operations. No group had claimed responsibility.

The Play ransomware group added Microchip to its leak site later in August and claimed to hold payroll, accounting, contract, tax and identity records, publishing some material to pressure the company. In a further SEC filing on September 4, 2024 Microchip said its operationally critical systems were back online and confirmed that employee contact information and some encrypted and hashed passwords had been obtained. It said it had found no evidence that customer or supplier data was affected.