Logitech International (SIX: LOGN) (Nasdaq: LOGI) today shared the Company recently experienced a cybersecurity incident relating to the exfiltration of data. This incident has not impacted Logitech's products, business operations or manufacturing.
Upon detecting the incident, Logitech promptly took steps to investigate and respond, with the assistance of leading external cybersecurity firms.
While the investigation is ongoing, at this time Logitech believes that the unauthorized third party used a zero-day vulnerability in a third-party software platform and copied certain data from the internal IT system. The zero-day vulnerability was patched by Logitech following its release by the software platform vendor. The data likely included limited information about employees and consumers, and data relating to customers and suppliers. Logitech does not believe any sensitive personal information, such as national ID numbers or credit card information, was housed in the impacted IT system. Logitech has begun the process to notify government entities as required.