Electronics Manufacturer Data I/O Reports Ransomware Attack – Operations Disrupted

The U.S.-based electronics manufacturer Data I/O Corporation has been hit by a ransomware attack. The Redmond, Washington-based company confirmed the incident in a filing with the U.S. Securities and Exchange Commission (SEC), cited by the cybersecurity portal Security Affairs. According to the report, the attack was detected on August 16, 2025, prompting Data I/O to immediately activate its emergency response plan and take affected systems offline.

Data I/O was founded in 1969 and specializes in manual and automated programming and security solutions for flash memory, microcontrollers, and other electronic components. Its product portfolio includes systems such as PSV, LumenX, FlashPAK III, and the security provisioning system SentriX. These solutions are primarily used in the automotive industry, the Internet of Things (IoT), industrial control, and consumer electronics.

Market Focus and Clients

The company’s main focus is the automotive segment, which accounts for over half of its revenue. Clients include major global companies such as Tesla, Panasonic, Amazon, Google, and Microsoft. Recently, Data I/O strengthened its market position in automotive and IoT applications through new contracts.

Impact of the Attack

The attack caused significant disruptions to operational processes, including internal and external communication, shipping, receiving, production, and other support functions. Some systems have been partially restored, but a timeline for full recovery is not yet available. External cybersecurity experts are assisting Data I/O in investigating the incident and restoring its systems.

Financial Risks and Ongoing Investigation

The ransomware group responsible for the attack has not yet been identified. Data I/O warns that costs for consulting, forensic analysis, and IT recovery may have “material impacts” on operational results. The company is also evaluating whether personal data was affected and whether notifications to affected parties or authorities are required.

Context

The incident adds to a series of attacks on companies in the manufacturing and technology sectors, highlighting the growing vulnerability of industrial firms at the intersection of digital infrastructure and production.

Source: Security Affairs, SEC Filing Data I/O (August 22, 2025)