Data I/O reports ransomware traced to a third-party firewall vulnerability

Data I/O, which makes device programming systems for electronics manufacturers, disclosed on August 21, 2025 that it had suffered a ransomware incident on internal IT systems on August 16. A second Item 1.05 filing on September 10 said the incident was not targeted at the company and put the recovery cost at about $388,000.

First filing

Communications, shipping, receiving and manufacturing were affected. The company said the incident did not appear to have materially affected operations so far, but expected its costs to be material to results.

September update

The follow-up 8-K identified the entry point. Systems were restored and no revenue appeared lost.

Not named

Data I/O did not name the firewall provider or the ransomware group.