ENGlobal restricts IT access after a threat actor encrypts data files

ENGlobal, a Houston engineering and automation services company, disclosed on December 2, 2024 that it had become aware of a cybersecurity incident on November 25 in which a threat actor encrypted some of its data files. It limited access to its IT system to essential operations while it responded.

First filing

The company said the actor encrypted files and that restoring full access had no set timeline.

January 2025 amendment

The 8-K/A gave the length of the disruption. ENGlobal said operations were fully restored and the actor no longer had access. The amendment also disclosed that the affected part of the system held sensitive personal information and that notifications would follow. The company concluded the incident was not material to its finances, except as described.

Not disclosed

ENGlobal did not say how many people's data was involved or what the recovery cost.