MathWorks, the company behind MATLAB and Simulink, has confirmed a ransomware attack that compromised personal data belonging to more than 10,000 people. The breach occurred in April but was not detected until May 18, according to filings with the Maine Attorney General’s office.
The attack disrupted multiple MathWorks services, including multi-factor authentication (MFA), single sign-on (SSO), the company’s cloud center, license management systems, file exchange, and its online store. Service outages, reported in late May, were ultimately linked to the ransomware incident.
In breach notification letters submitted to regulators, MathWorks disclosed that attackers exfiltrated sensitive documents containing personal information. Exposed data varies by individual but may include names, addresses, dates of birth, Social Security numbers, and non-U.S. identification numbers. In total, data from 10,476 individuals was confirmed stolen.
Despite acknowledging the ransomware attack, MathWorks has yet to specify which threat group was responsible. Notably, no ransomware operation has publicly claimed the intrusion—fueling speculation that negotiations may be ongoing or that a ransom has already been paid.
Founded in 1984 and headquartered in Natick, Massachusetts, MathWorks employs more than 6,500 people globally and serves over 5 million users across 100,000 organizations. Its widely adopted products make it a high-value target for financially motivated threat actors.
