Nucor Corporation, North America’s largest steel producer and recycler, has confirmed that cybercriminals successfully stole company data during a recent security breach that disrupted operations across multiple facilities.

## Company Impact and Response

The steel giant, which employs over 32,000 people across the United States, Mexico, and Canada and generated $30.73 billion in revenue last year, initially disclosed the incident last month. The company was forced to shut down certain systems and temporarily halt production at several facilities to contain the breach.

In a recent filing with the U.S. Securities and Exchange Commission (SEC), Nucor provided additional details about the incident’s scope and impact.

## Data Exfiltration Confirmed

“The Company’s investigation determined that the threat actor exfiltrated limited data from the Company’s information technology systems,” Nucor stated in its SEC filing. The company is currently reviewing the compromised data and will notify affected parties and regulatory agencies as required by law.

The cyberattack resulted in temporary restrictions to portions of Nucor’s IT systems, affecting operations at multiple locations. As a precautionary measure, the company proactively suspended certain production activities across various sites.

## Recovery Efforts

Nucor has taken several steps to address the incident:

– Engaged external cybersecurity experts to assist with recovery and investigation
– Notified law enforcement authorities
– Restored access to affected systems
– Resumed impacted production operations
– Confirmed that threat actors have been removed from the network

## Ongoing Investigation

Key details about the attack remain undisclosed, including:

– The exact date the breach was discovered
– The specific type of cyberattack employed
– Whether systems were encrypted (indicating potential ransomware)

No ransomware groups have publicly claimed responsibility for the attack. However, data theft often precedes ransomware deployment in modern double-extortion schemes, where criminals steal sensitive information before encrypting systems to maximize pressure on victims.

The company has not responded to requests for additional information about the breach, and the investigation continues as Nucor works to fully assess the incident’s impact and prevent future attacks.