Analog Devices confirmed a breach, counted no one, and filed nothing
Advantest's October breach letters counted 522 people across three US states. Four days later, Analog Devices confirmed an intrusion with no date, no count, and no incident filing on EDGAR. Scope is the only thing that prices the damage.
Vincent Jiang · 3 min read
The confirmation that counts nothing
Analog Devices+0.69% — Analog Devices, up 0.69 percent today, the Massachusetts analog-chip maker with a $200.95 billion market capitalization 2, has confirmed that unauthorized parties reached its internal corporate systems, in a disclosure first reported by the cybersecurity outlet Recorded Future News 1. The confirmation names no intrusion date, no entry method, no record count, no suspected actor, and says nothing on whether manufacturing was touched 1. ADI has also not said whether the incident clears the SEC's materiality bar, or whether any regulator has been told 1.
Every number came from a state law
Four days earlier, on October 7, 2026, SecurityWeek reported that Advantest+0.55% — Advantest, up 0.55 percent today, the Japanese maker of chip test equipment used by Intel−2.90% — Intel, down 2.90 percent today and Samsung, had begun telling individuals that the ransomware attack it disclosed in February did steal personal data: names, birth dates, Social Security and passport numbers, medical and financial records 3. Every count in that story was forced by US state attorneys general: more than 500 people in California, 14 in Massachusetts, 8 in Vermont, meaning 522 at minimum eight months after the intrusion, with no company total 3. Southern Company+1.13% — Southern Company, up 1.13 percent today, in the same October wave, put its own figure at roughly 400,000 utility accounts 4. CenterPoint's+0.99% — CenterPoint, up 0.99 percent today Texas filing shows more than 1 million customers 5. State privacy laws made a chip-equipment maker count Californians; no rule on the books makes a chipmaker count its own blueprints.
The count exists only where state law forces it
Data
| Value | |
|---|---|
| California | 500+ |
| Massachusetts | 14 |
| Vermont | 8 |
EDGAR shows no clock running
The SEC's 2023 cyber rule gives a public company four business days from a materiality determination to file an incident report on Form 8-K 1. ADI's EDGAR docket, read on October 16, lists no 8-K since September 17; October's entries are insider Forms 4 and Rule 144 sale notices 6. Either no materiality call has been made, or the call was that this is immaterial. Both readings are lawful, and both leave investors holding zero. The exposure is not this quarter's shipments: chip vendors hold process recipes, customer schematics and yield data with multi-year value, and tier-one automotive and industrial buyers now check a vendor's breach history before awarding long-term design wins, on contractual notice windows of 24 to 72 hours that ADI has not publicly met 1.
October 28 puts numbers next to the noise
Advantest, now worth about ¥25 trillion 7, reports its September quarter on October 28 7. Its June quarter delivered revenue of ¥367.47 billion, up 39.3%, and net income of ¥174.78 billion, up 93.8% 7; seven analysts expect September revenue of ¥429.55 billion 8. The stock fell with the Nikkei's 4.9% drop on October 15, the index's third-largest point fall on record, on a day Japan's finance ministry said G7 and G20 ministers see no financial-stability risk from the AI sell-off 9. If ADI ever puts a count on the record, that filing, not the confirmation, becomes the first tradeable fact on its side of the story.
Advantest revenue kept climbing straight through its breach year
- Revenue
- Estimate
Data
| Revenue | |
|---|---|
| Sep 2025 qtr | ¥262.96B |
| Jun 2026 qtr | ¥367.47B |
| Sep 2026 qtr (estimate) | ¥429.55B |
Deepdive
AI-generated from this story and its cited sources. Not investment advice.



