"On June 23, 2026, Analog Devices, Inc. identified unauthorized access to certain Company systems," Analog Devices says in a filing with the U.S. Securities and Exchange Commission (SEC).
How Analog Devices detected the intrusion and activated response protocols
Analog Devices says it detected the incident on June 23 and immediately activated its incident response protocols to limit the breach. The company contracted external cybersecurity experts to assist with containment and investigatory activities, and it reports that law enforcement authorities have been informed. The filing emphasizes that the company reacted promptly after detection and engaged outside specialists to help manage the response.
What was taken: company confirms files were exfiltrated but not their nature
The company disclosed that an unauthorized party accessed some systems and exfiltrated certain files, but it currently provides no details about the type of data compromised. Analog Devices says it has "no knowledge of any stolen data being leaked online or used for fraudulent purposes," and that it will continue to monitor the situation and take necessary action. The company also states that affected parties and regulators will receive notifications about any compromised information.
ExfilSquad's public claim and the July 26 public report
Separately, the company is assessing a cybersecurity matter that surfaced in public reports on July 26. Those reports noted that the data extortion group ExfilSquad recently added Analog Devices to its leak site and claimed to have exfiltrated information from company systems. The threat actor subsequently no longer listed Analog Devices on its site; BleepingComputer's reporting observed that while the reason for the delisting is unknown, it is common for threat actors to delist companies when ransom negotiations begin. It remains unclear whether the ExfilSquad claim is connected to the breach disclosed in the SEC filing, and the company says no other ransomware or data-extortion groups have announced attacks against Analog Devices.
Operations, workforce, and financial impact as stated by the company
Analog Devices told investors and the public that its business operations were not affected by the incident. The company said it does not believe the event will have any material impact on its operations or financial condition. The filing notes the company's profile in brief: it designs analog, mixed-signal, power management, and digital signal processing chips used in industrial automation, automotive systems, communications infrastructure, healthcare equipment, aerospace, and data centers, employs approximately 24,500 people worldwide, and generated more than $11 billion in revenue in 2025.
What this means for technologists, regulators, and affected customers
- Technologists and security teams: the company’s use of incident response protocols and external cybersecurity specialists indicates an ongoing technical containment and investigation effort; teams will be watching for details on the kinds of files exfiltrated and any indicators of compromise that may be shared.
- Regulators and law enforcement: law enforcement has been informed and the company says regulators will receive notifications; regulatory attention and formal notifications to affected parties are already part of the company’s stated next steps.
- Affected customers and partners: the company has promised notifications to affected parties and said it is unaware of any data being leaked or used fraudulently to date; customers and partners will be monitoring communications from Analog Devices and any public updates from the ongoing investigation.
Analog Devices’ public disclosures leave two facts clear: files were exfiltrated and the company believes its operations were not interrupted. Beyond that, details remain limited — the company and external investigators are working to determine what was taken and whether public claims by a data-extortion group relate to the SEC-filed incident. BleepingComputer has contacted the company for additional details and says it will update its reporting as new information becomes available.
