2023-06-13 HAYNES INTERNATIONAL INC Cybersecurity Incident

Page last updated on September 29, 2025

HAYNES INTERNATIONAL INC initially disclosed a cybersecurity incident in an SEC 8-K filing on 2023-06-13 07:13:54 EDT.

Incident Details

Material: Yes
Is Breach: Unknown
Records Compromised: Unknown
Data Types Impacted: No Data Types Tracked (yet)

Compromised Date: 2023-06-10
Detected Date: 2023-06-10
Disclosure Date: 2023-06-13
Contained Date: Unknown
Recovered Date: Unknown

Attack Goal: Unknown
Attack Tactics¹: TA0040, TA0010
Attack Techniques¹: OTHER

Costs: $18M - $20M

• Lost revenue (Indirect): $18M - $20M
• Incident response (Indirect): Not Tracked (yet)
• System restoration (Indirect): Not Tracked (yet)
• Third-party costs (Indirect): Not Tracked (yet)

Filings

8-K filed on 2023-06-13

HAYNES INTERNATIONAL INC filed an 8-K at 2023-06-13 07:13:54 EDT
Accession Number: 0001104659-23-070584

Item 8.01 Other Events.

On June 10, 2023, Haynes International Inc. (the "Company") began experiencing a network outage indicative of a cybersecurity incident. Upon detection of the incident, the Company engaged third-party specialists to assist in investigating the source of this outage, determine its potential impact on the Company's systems, and securely restore full functionality to the Company's systems as soon as possible. The Company's Incident Response Team reported the incident to law enforcement and has taken additional steps to protect the integrity of the Company's systems. Despite temporarily shutting down its network while it investigates the threat, the Company continues to run many of its manufacturing operations during the investigation, albeit initially less efficiently. At this time, the network shutdown is primarily affecting administrative, sales, financial and customer service functions. The investigation into this incident is ongoing, and the Company and its consultants are working to restore network functionality.

8-K filed on 2023-06-21

HAYNES INTERNATIONAL INC filed an 8-K at 2023-06-21 09:19:40 EDT
Accession Number: 0001104659-23-073211

Item 8.01 Other Events.

On June 21, 2023, Haynes International Inc. (the "Company") issued a press release to provide an update regarding its operational restoration efforts following the recent cybersecurity incident.

As previously disclosed, on June 10, 2023, the Company began experiencing a network outage indicative of a cybersecurity incident. Upon detection of the incident, the Company engaged third-party specialists to assist in investigating the source of the outage, determine its potential impact on the Company's systems, and securely restore full functionality to the Company's systems.

Although various aspects of the Company's networks were down while the retained specialists remediated the incident, all of the Company's manufacturing operations are now running with some operating inefficiencies. In addition, the Company has substantially restored its administrative, sales, financial, and customer service functions.

While the Company has determined that some data was copied from the network, at this stage, there is no evidence that either customer or employee information was accessed. Although the incident and the Company's response efforts caused some delay in product shipments, it is not yet possible to determine the full impact on the Company's quarterly financial results.

The investigation into this incident and the Company's restoration efforts are ongoing.

The full text of the press release is furnished as Exhibit 99.1 to this Current Report on Form 8-K and is incorporated herein by reference.

Exhibit No. 99.1

Haynes International, Inc. Press Release, issued June 21, 2023.

HAYNES INTERNATIONAL UPDATES OPERATIONAL RESTORATIONS

KOKOMO, IN, June 21, 2023 - Haynes International, Inc. (NASDAQ GM: HAYN) (the "Company"), a leading developer, manufacturer and marketer of technologically advanced high-performance alloys, provided an update today regarding its operational restoration efforts following the recent cybersecurity incident.

As disclosed last week, on June 10, 2023, the Company began experiencing a network outage indicative of a cybersecurity incident. Upon detection of the incident, the Company engaged third-party specialists to assist in investigating the source of the outage, determine its potential impact on the Company's systems, and securely restore full functionality to the Company's systems.

Although various aspects of the Company's networks were down while the Company retained specialists and remediated the incident, all of the Company's manufacturing operations are now running, albeit with some operating inefficiencies. In addition, the Company has substantially restored its administrative, sales, financial, and customer service functions.

While the Company has determined that some data was copied from the network, at this stage, there is no evidence that either customer or employee information was accessed. Although the incident and the Company's response efforts caused some delay in product shipments, it is not yet possible to determine the full impact on the Company's quarterly financial results.

The investigation into this incident and the Company's restoration efforts are ongoing.

8-K filed on 2023-07-19

HAYNES INTERNATIONAL INC filed an 8-K at 2023-07-19 09:02:14 EDT
Accession Number: 0001104659-23-082214

Item 7.01 Regulation FD Disclosure.

On July 19, 2023, as part of the Company's press release described in Item 2.02 above, the Company provided an update on the previously disclosed cybersecurity incident.

The text of the press release is furnished as Exhibit 99.1 to this Current Report on Form 8-K and is incorporated herein by reference.

The information in Items 2.02, 7.01 and 9.01, including Exhibit 99.1 of this Current Report on Form 8-K, is being furnished and shall not be deemed "filed" for the purposes of Section 18 of the Securities Exchange Act of 1934, as amended (the "Exchange Act"), or otherwise subject to the liability of such section or incorporated by reference in any filing under the Securities Act of 1933, as amended, or the Exchange Act, except as shall be expressly set forth by specific reference in such a filing.

Exhibit No. 99.1

Haynes International, Inc. Press Release, issued July 19, 2023.

HAYNES INTERNATIONAL PROVIDES CYBERSECURITY UPDATE AND ESTIMATED THIRD QUARTER FINANCIAL IMPACT

KOKOMO, IN, July 19, 2023 - Haynes International, Inc. (NASDAQ GM: HAYN) (the "Company"), a leading developer, manufacturer and marketer of technologically advanced high-performance alloys, provided an update today regarding the recent cybersecurity incident including the estimated quarterly financial impact.

As previously disclosed, the Company began experiencing a network outage indicative of a cybersecurity incident on June 10, 2023. Upon detection of the incident, the Company engaged third-party specialists to assist in investigating the source of the outage, determine its potential impact on the Company's systems, and securely restore full system functionality. On June 21, 2023, less than 2 weeks after the incident began, the Company announced that all manufacturing operations were running and that the Company had substantially restored administrative, sales, financial and customer service functions. Nevertheless, during those 11 days many aspects of the Company's production were substantially disrupted.

Based on lost production time, the Company estimates that net revenues for the quarter was impacted by roughly $18 - $20 million resulting in estimated net sales for the third quarter at $142-$145 million. The lower production level also impacted efficiency and absorption of fixed costs which compressed the gross margin percentage for the quarter and impacted earnings. Also impacting earnings are the costs related to the investigation and restoration efforts. In total, the Company currently estimates the full impact of this event to be approximately $0.40 - $0.45 on diluted earnings per share. In addition, the estimated headwind from raw material fluctuations, primarily Cobalt, lowered diluted earnings per share an additional $0.09 resulting in an estimated diluted earnings per share of $0.65 - $0.70 for the third quarter of fiscal year 2023.

"I am pleased with the team's quick and robust response to the cyber-security incident. Our Enterprise Risk Management planning efforts related to cyber-security preparedness were activated and proved very effective," said Mike Shor, President and Chief Executive Officer. "We have regained good momentum and expect to make up the third quarter cyber-related shortfall over the next few quarters. Our team is once again focused on continued performance improvement."

Company Information