Analog Devices under attack: unauthorized access and ExfilSquad's claim of 570,000 records
Analog Devices confirms a June data breach and is verifying a separate claim by ExfilSquad of stealing 570,000 records. Get the latest security details.
Illustrative image generated with AI
June 23 access and data exfiltration
On June 23, Analog Devices detected unauthorized access to some of its systems. An investigation, supported by external experts, confirmed that an attacker successfully exfiltrated files from the corporate network.
The company has not disclosed the type of compromised data, but ruled out operational disruptions and any dissemination or malicious use of the stolen material. No material impact on business, operations, or financial results is expected at this time.
ExfilSquad steps in on July 26, 2026
On July 26, 2026, Analog Devices became aware of public reports linked to the criminal group ExfilSquad, which claimed the theft of 570,000 records from the company.
Analog Devices stated that this second episode is separate and unrelated to the first. The company has launched internal checks to verify the validity of the claim. Meanwhile, Analog Devices' name has been removed from the leak site used by the group.
A group specialized in extortion, but with little credibility
ExfilSquad runs extortion campaigns based solely on data theft, without deploying ransomware. It threatens to publish stolen information if the victim does not pay a ransom.
According to SOCRadar, several of the group's past claims have proven exaggerated or entirely false, casting doubt on the real severity of the current threat. If the 570,000 records were genuine, the criticality would increase, but for now, confirmation is missing.
Corporate response and impacts
Analog Devices reacted quickly to the first incident, engaging external security consultants. No indicators of compromise (IOCs) or recommendations for customers or partners have been released.
Regarding the ExfilSquad claim, the company is still assessing its validity and consequences; no containment measures have been announced. The financial impact of the first incident is expected to be immaterial, while that of the second remains to be quantified. The media attention generated by the criminal group could nevertheless weigh on perceptions of Analog Devices' security posture.
Sources
This article is an original reworking based on the sources below.
- BleepingComputer
- SecurityWeek
- The Record
- Security Affairs




