230/68 Wednesday, June 25, 2025
Nucor Corporation, the largest steel producer in the United States and a leading recycler of scrap metal in North America, confirmed on Friday that a portion of its data was stolen during a cyberattack that occurred in May 2025. The company had previously disclosed the incident in a filing with the U.S. Securities and Exchange Commission (SEC), noting unauthorized access to its IT systems that affected some business operations. As a precautionary measure, Nucor temporarily shut down certain systems and production lines.
Following the discovery, Nucor activated its Incident Response Plan and began working with cybersecurity experts and law enforcement agencies to investigate the breach. The investigation revealed that threat actors had gained access to and exfiltrated data from the company’s systems. While Nucor did not disclose specific technical details of the attack, it stated that it had notified individuals potentially impacted, in compliance with legal requirements.
Although the company has not confirmed whether ransomware was involved, industry analysts believe the nature of the intrusion aligns with tactics commonly used by ransomware groups targeting the manufacturing sector. As of now, no ransomware group has claimed responsibility for the attack.
