Data Breaches

Steelmaker Nucor Says Hackers Stole Data in Recent Attack

Nucor has shared an update on the impact of the recent cyberattack and confirmed that some data has been taken from its IT systems.

Nucor data breach

American steel giant Nucor Corporation (NYSE: NUE) has shared an update on the recent cyberattack, confirming that hackers have taken some data from its systems.

Nucor, which claims to be the largest steel manufacturer and recycler in North America, disclosed the cybersecurity incident in mid-May. 

The attack involved unauthorized access to IT systems and resulted in some systems being taken offline and the temporary halting of certain production operations. 

Nucor on Friday shared an update on the incident in a filing with the Securities and Exchange Commission (SEC). The company’s investigation showed that the threat actor managed to exfiltrate “limited data” from the compromised IT systems.

“The Company is reviewing and evaluating the impacted data and will carry out any appropriate notifications to potentially affected parties and to regulatory agencies as required by applicable law,” Nucor said.

Systems taken offline in response to the cyberattack have been restored and the company told the SEC that the incident is unlikely to have a material impact on its financial condition or results of operations. 

Advertisement. Scroll to continue reading.

Nucor believes the threat actor has been locked out of its systems and it has taken steps to prevent future breaches.

While its response to the incident suggests that the steelmaker may have been targeted in a ransomware attack, no known group appears to have taken credit for the Nucor hack. 

Related: 161,000 People Impacted by Krispy Kreme Data Breach

Related: Hackers Access Legacy Systems in Oxford City Council Cyberattack

Related: Chain IQ, UBS Data Stolen in Ransomware Attack

Related Content

Data Breaches

The Florida Department of Education says SSNs and other personal data may have been exposed in a breach of its financial aid website.

Data Breaches

Hackers accessed its online shopping platform and stole customers’ personal and payment card information.

Data Breaches

The attackers used offensive agentic techniques to access the company’s systems and internal tools.

Data Breaches

DebugBear says its DNS records were compromised via its domain registrar, and early findings show a single customer was targeted.

Data Breaches

The data of So-net and Plala customers in Japan was exposed, along with 54,401 email account passwords and 16 bank account records.

Data Breaches

Hackers stole personal information and iRhythm account and device data from third-party-hosted business applications.

Data Breaches

A leaked SquareML access key could have been used to access a database containing personal and health information.

Data Breaches

The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version