ENGLOBAL CORP

ENGlobal, a small engineering contractor woven into the energy sector and the federal supply chain, spent roughly six weeks locked out of its own financial systems after a threat actor encrypted its files and reached the personal data held in the same IT estate. Neither the entry vector nor the number of people exposed was ever named, and no ransomware group claimed the intrusion. For a firm whose product is trust across critical infrastructure, a flat internal network is not a footnote; it is the whole exposure.