Analog Devices confirmed a June intrusion with data theft; days later, an extortion crew calling itself ExfilSquad — the same group that hit Allstate — claimed 570,000 stolen records.
Analog Devices makes the unglamorous chips that keep other people's products working — power management ICs, data converters, sensor interfaces — the kind of parts that end up in a GPU's power delivery, a car's driver-assist system, or an MRI machine, without ever carrying a brand name a consumer would recognize. On July 29, 2026, the Massachusetts-based chipmaker filed an SEC Form 8-K confirming that hackers broke into its systems and stole files, with unauthorized access dating back to at least June 23. Two days before that filing, an extortion group calling itself ExfilSquad had listed ADI on its leak site, claiming to have taken 570,000 records. Whether those two things are actually the same incident is, as of this writing, something Analog Devices itself won't say.
What Analog Devices has actually confirmed — and what it hasn't
The confirmed part is narrow but real: ADI detected unauthorized access on June 23, activated its incident response plan, brought in outside cybersecurity help, and its investigation determined that certain files were exfiltrated. It hasn't said what type of data. It says operations were never interrupted and the incident isn't expected to be material to its financials. Separately, the filing notes the company was made aware of a 'disparate cybersecurity matter' — industry reporting connects this to the ExfilSquad listing — and is still assessing its validity, scope, and potential impact. Two different claims, one filing, and a lot of coverage treating them as a single event when ADI itself has drawn a line between them.
The ExfilSquad pattern — and why Allstate is the tell
ExfilSquad listed Allstate the same week, claiming roughly 657,000 records and 15.1 gigabytes of data — recruitment, licensing, onboarding, and internal employee account details, according to reporting on the group's leak-site posting. The group specializes in data theft and extortion rather than file-encrypting ransomware, and has been active since late 2024. It's worth being skeptical of the exact numbers: at least one security researcher has flagged some of ExfilSquad's past claims as exaggerated, and ADI's listing has since disappeared from the group's leak site, which can mean a deal was reached, the claim was withdrawn, or it wasn't solid to begin with. Treat 570,000 as a claim, not a fact, until ADI or independent forensics confirms it.
ADI's chips — power management ICs, data converters, sensor interfaces — show up across the electronics supply chain, rarely under its own name. · Unsplash
Why a breach at a company you've never heard of matters to hardware buyers
ADI isn't a household name, but its analog and mixed-signal chips are everywhere in the hardware our readers actually care about — power delivery components on graphics cards, sensor and power ICs feeding the same industrial and automotive supply chain that's already strained by GDDR7 memory shortages and the broader chip-shortage pressure pushing GPU prices up, which we've tracked in our dollar-per-GB VRAM breakdown and AMD's return of the 4GB card. A breach at a components supplier this size is a supply-chain trust question as much as a privacy one — compromised design files or partner data at a chip vendor can ripple into every product line sourcing from them, not just the customers whose records may or may not have actually been taken.
ExfilSquad's claimed July 2026 targets
Analog Devices
Claimed records
~570,000
Status
Listed July 26, 2026 — ADI confirms a separate June breach, hasn't confirmed this figure or a link between the two
Allstate
Claimed records
~657,000
Status
Listed July 26, 2026 — unconfirmed by Allstate as of reporting
Claimed records
Status
Analog Devices
~570,000
Listed July 26, 2026 — ADI confirms a separate June breach, hasn't confirmed this figure or a link between the two
Allstate
~657,000
Listed July 26, 2026 — unconfirmed by Allstate as of reporting
The incident did not disrupt Analog Devices' operations and is not expected to have a material impact on its business, operations, or financial condition.
Analog Devices, SEC Form 8-K, July 29, 2026
Quick answers
Is this the same breach ExfilSquad is claiming, or two separate incidents?
Unclear. Analog Devices confirmed unauthorized access and file theft starting June 23, then separately said it's assessing a 'disparate cybersecurity matter' referring to the ExfilSquad claim — it hasn't said the two are the same event.
What data did ExfilSquad actually claim to steal?
Customer PII and physical home addresses, according to reporting on the group's leak-site listing. ADI has not verified this.
Does this affect Analog Devices chips already inside products I own?
No — this is a corporate IT breach, not a hardware supply-chain compromise of the chips themselves. There's no indication any product firmware or silicon was altered.
Is ExfilSquad a ransomware group?
Loosely, but it's more accurate to call it a data-theft extortion group — reporting indicates it steals and threatens to leak data rather than encrypting victims' files, unlike file-encrypting ransomware crews such as INC.
ADI says it's still investigating scope, so expect an update — possibly a more specific breach notification — now that the SEC filing has made the incident public record. We'll revisit this once either ADI or independent forensic reporting settles whether the ExfilSquad number holds up, the same way we're watching the parallel MCBS breach and Allstate claim play out.
