ENGlobal suffers ransomware cyberattack

ENGlobal Corporation is a US energy contractor based in Oklahoma, founded in 1985 and engaged in the instrumentation and automation of systems for the US defence industry.

In a Form 8-k filed with the Securities and Exchange Commission (SEC), the company acknowledged that it had detected in a preliminary investigation that an unknown threat actor had illegally accessed its IT systems and encrypted some of its files. The company shut down all but business-critical IT systems in order to contain and investigate the incident. In addition, it has hired external cybersecurity experts to investigate the incident.

At the time of writing, the company has not determined what data has been stolen or the nature of the ransomware. Nor has there been any acknowledgement of authorship by any threat actor.