Semiconductor tools maker MKS Devices is investigating a ransomware occasion that occurred on February 3 and impacted its production-related techniques, the corporate mentioned in a submitting with the US Safety and Trade Fee.
MKS Devices is an Andover, Massachusetts-based supplier of subsystems for semiconductor manufacturing, wafer stage packaging, bundle substrate and printed circuit boards.
An electronic mail despatched to MKS Devices looking for extra details about the assault remained unanswered, whereas the corporate’s web site continued to be inaccessible on the time of writing, with a error notification that learn, “Sadly, www.mks.com is experiencing an unscheduled outage. Please verify again once more at a later time.”
“On February 3, 2023, MKS Devices recognized that it had grow to be topic to a ransomware occasion and took speedy motion to activate its incident response and enterprise continuity protocols to comprise the incident,” Kathleen F Burke, senior vice chairman, common counsel and secretary at MKS Devices, mentioned within the SEC submitting.
The corporate mentioned it has notified regulation enforcement authorities whereas it investigates and assesses the affect of the incident by participating “applicable incident response professionals.”
“The incident has affected sure enterprise techniques, together with production-related techniques, and as a part of the containment effort, the corporate has elected to briefly droop operations at sure of its amenities,” Burke mentioned.
The corporate mentioned it’s working to revive its techniques and impacted operations as rapidly as doable. “The total scope of the prices and associated impacts of this incident, together with the extent to which the corporate’s cybersecurity insurance coverage could offset a few of these prices, has not been decided,” Burke mentioned.
Ransomware assaults on the rise
MKS reported the ransomware incident only a day after nationwide cybersecurity businesses and safety consultants around the globe warned a couple of world ransomware assault that hit 1000’s of servers operating on VMware ESxi.
Nationwide cybersecurity businesses and organizations within the US, France and Singapore have issued alerts in regards to the assault. Servers have been compromised in France, Germany, Finland, the US and Canada. Greater than 3,200 servers have been compromised globally up to now by the ransomware assault, in line with cybersecurity agency Censys.
In January, there have been 33 publicly disclosed ransomware assaults, the best variety of assaults ever recorded for January, in line with cybersecurity agency Blackfog. About 438% of ransomware assaults should not publicly disclosed to keep away from regulatory penalties, fame harm and sophistication motion lawsuits, the agency famous.
Cybersecurity insurance coverage agency Coalition alternatively has predicted that there will likely be 1,900 common month-to-month essential Widespread Vulnerabilities and Exposures (CVEs) in 2023, a 13% enhance over 2022. The 1,900 CVEs would come with 270 high-severity and 155 critical-severity vulnerabilities. The variety of vulnerabilities is predicted to rise additional. A few of these vulnerabilities can presumably be used for ransomware assaults.
Copyright © 2023 IDG Communications, Inc.
