2023-01-06 SIFCO INDUSTRIES INC Cybersecurity Incident

Page last updated on April 11, 2024

SIFCO INDUSTRIES INC initially disclosed a cybersecurity incident in an SEC 8-K filing on 2023-01-06 16:30:55 EST.

Incident Details

Material: Unknown
Is Breach: Unknown
Records Compromised: Unknown
Data Types Impacted: No Data Types Tracked (yet)

Compromised Date:
Detected Date: 2022-12-30
Disclosure Date: 2023-01-06
Contained Date:
Recovered Date:

Attack Goal: Unknown

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2023-01-06

SIFCO INDUSTRIES INC filed an 8-K at 2023-01-06 16:30:55 EST
Accession Number: 0001193125-23-003592

Item 8.01 Other Events.

On December 30, 2022, SIFCO Industries, Inc. (the “Company”) identified that it had become subject to a cyber incident and activated measures designed to contain the incident. The Company’s forensic investigation and assessment of the impact of this event is ongoing. The Company has notified appropriate law enforcement authorities and legal counsel, a cybersecurity forensic firm, and other incident response professionals have been engaged.

As the Company is in the early stages of its investigation and assessment of this event, the Company cannot determine at this time whether such event will have a material impact on its business, operations, or financial results.

8-K filed on 2023-02-10

SIFCO INDUSTRIES INC filed an 8-K at 2023-02-10 16:34:08 EST
Accession Number: 0000090168-23-000006

Item 8.01 Other Events.

After suffering the Cyber Incident communicated on January 6, 2023, the Company determined that certain of its financial reporting systems were impacted to varying degrees as a result of this event. The Company continues to investigate and evaluate the extent of the Cyber Incident, while working diligently to mitigate and remediate those systems that have been impacted. The Company is not in a position at this point to conclude whether its operations, controls or financial results have been materially impacted by the Cyber Incident.

This Current Report on Form 8-K includes forward-looking statements. All statements other than statements of historical fact are forward-looking statements. These forward-looking statements are generally identified by the words “anticipate,” “believe,” “estimate,” “expect,” “intend,” “may,” “could” or similar expressions. Forward-looking statements are based on current expectations and assumptions, which are subject to risks and uncertainties and may cause actual results to differ materially from the forward-looking statements. In particular, the preliminary nature of our investigation into the Cyber Incident , which is still ongoing, may uncover additional facts presently not known to us, which may cause us to reassess the impacts and scope of the Cyber Incident on the Company’s business and operations. Further, our ability to fully assess and remedy the Cyber Incident, and the legal, reputational and financial risks resulting from this or other cyber incidents, could also cause our results to differ materially from any forward-looking statements made above.

8-K filed on 2023-04-11

SIFCO INDUSTRIES INC filed an 8-K at 2023-04-11 21:13:50 EDT
Accession Number: 0000090168-23-000014

Item 8.01 Other Events.

As reported by the Company on Form 12b-25 filed with the Securities and Exchange Commission (the “SEC”) on February 14, 2023, the Company experienced delays in obtaining and compiling the information required in order to complete the preparation of its financial statements to be included in its Quarterly Report on Form 10-Q for the fiscal quarter ended December 31, 2022, attributable primarily to information access limitations experienced due to the cyber incident that occurred on December 30, 2022 (the “Cyber Incident”) and was reported by the Company on Form 8-K filed with the SEC on January 6, 2023 and further described by the Company on Form 8-K filed with the SEC on February 10, 2023. Accordingly, the Company was not able to complete the preparation, review and filing of its Form 10-Q for the quarter ended December 31, 2022 within the prescribed time period without unreasonable effort or expense.

As of the date of this filing, the Company has lifted information access limitations implemented in response to the Cyber Incident and is in the process of working to complete the preparation, review and filing of its Form 10-Q for the quarter ended December 31, 2022. As indicated by the Company on Form 8-K filed with the SEC on February 28, 2023, fiscal second quarter production was negatively impacted due to system constraints during the recovery. The Company as of the date of this filing continues to meet customer needs and continues to evaluate the impact to its operations, controls or financial results caused by the Cyber Incident during the applicable periods.

Company Information