Ransomware
Keytronic (Key Tronic) Black Basta Ransomware Attack
Primary Source ↗Incident Details
Keytronic, a printed circuit board assembly (PCBA) manufacturer based in Spokane, WA, was hit by Black Basta ransomware on May 6, 2024. Operations in the US and Mexico were halted for approximately two weeks. Black Basta exfiltrated ~530 GB of HR, finance, engineering and corporate data and published it on their leak site. Total losses exceeded $17 million: ~$2.3M in direct costs and ~$15M in lost revenue. A SEC 8-K filing disclosed the incident. This is a notable manufacturing/OT sector incident with significant documented financial impact.
Technical Details
- Initial Attack Vector
- Unknown; Black Basta typically uses phishing emails and exploited vulnerabilities for initial access
- Malware Family
- Black Basta ransomware
Timeline
- 2024-05-06 Breach occurred
- 2024-06-01 Publicly disclosed
- 2024-07-01 Customers notified