Wave of Cyberattacks Hits Major US Companies, Disrupting Operations

A wave of cybersecurity incidents has impacted a diverse range of U.S. companies this year, leading to operational disruptions, significant data breaches, and financial demands. The attacks, detailed in a series of corporate disclosures, underscore the escalating threat that cybercrime poses to corporate America across nearly every sector.

A Broad-Based Threat

The incidents are not confined to a single industry, affecting consumer giants, technology firms, healthcare providers, and industrial conglomerates alike. The breadth of targets highlights a vulnerable and interconnected corporate landscape.

Notable companies reporting cyber events in recent months include:

• Consumer & Retail: Nike, Hasbro, Levi Strauss, and Coca-Cola, which saw its fairlife unit temporarily suspend U.S. production.
• Healthcare & MedTech: Stryker, Boston Scientific, Abbott Laboratories, and iRhythm Holdings, with some incidents exposing sensitive patient health information.
• Technology & Gaming: OpenAI, Take-Two Interactive, Uber, and cybersecurity firm Fortinet itself.
• Travel & Hospitality: Wynn Resorts and cruise operator Carnival.

Operational and Data Risks Mount

Ad

The consequences of these attacks extend beyond data theft, frequently causing tangible disruptions to core business operations. Medical device maker Boston Scientific reported that an incident disrupted systems used to process and ship customer orders. Similarly, a cyberattack on Stryker impacted its order processing, manufacturing, and global shipments, according to the company.

Data breaches remain a primary objective for attackers. In February, hackers reportedly obtained employee data from Wynn Resorts and demanded a ransom equivalent to $1.5 million in bitcoin. Carnival disclosed that a social-engineering attack compromised an employee account, exposing personal information of individuals, including government-issued identification numbers.

Evolving Tactics and Government Scrutiny

The methods used by attackers are increasingly sophisticated, ranging from social engineering to exploiting vulnerabilities in third-party software. A hacking group claimed it stole data from nearly 50 companies, including GE and Fiserv, by leveraging a single software flaw, Reuters reported.

The rising threat has drawn attention at the federal level. The White House announced in July it was launching a coordination group for AI developers and critical infrastructure operators to share information on cyber vulnerabilities. However, according to Reuters, further details on the initiative have not yet been released, even as companies grapple with the ongoing surge in digital threats.