BK Technologies Data Breach – Hackers Compromise IT Systems and Exfiltrate Data

BK Technologies Corporation, a provider of communications equipment for public safety and government agencies, has disclosed a cybersecurity incident involving an unauthorized breach of its information technology systems, potentially resulting in the exfiltration of sensitive data.

In a Form 8-K filing with the U.S. Securities and Exchange Commission (SEC), the company reported detecting suspicious activity on or around September 20, 2025.

Initial findings indicate that data pertaining to current and former employees may have been compromised. Following the detection, BK Technologies initiated a response to contain and remediate the threat, isolating affected IT systems to prevent further unauthorized access.

BK Technologies engaged external cybersecurity advisors to assist internal teams in conducting a thorough investigation. The containment and remediation efforts successfully removed the threat actor from the company’s environment.

The incident caused minor disruptions to a limited number of non-critical systems. The company stated that access to impacted information has been restored, and core business operations continued without material interruption.

The investigation confirmed that attackers likely accessed and acquired non-public information stored within the company’s systems. The primary concern is the potential exposure of sensitive employee data. The exfiltrated files may contain records related to individuals who are or were previously employed by BK Technologies.

The company is investigating the precise nature and full extent of the data theft to determine exactly what information was compromised. In compliance with legal and regulatory obligations, BK Technologies has reported the incident to law enforcement authorities and plans to notify affected parties and regulatory agencies as required.

BK Technologies does not anticipate a material impact on its financial condition or results of operations. A significant portion of the direct costs associated with containing, investigating, and remediating the incident is expected to be reimbursed through insurance coverage.

While the investigation is ongoing, the company has implemented measures to secure its environment and prevent future occurrences. The report includes a cautionary statement that the full repercussions of the incident are still being assessed, with potential legal, reputational, and financial risks as more details emerge.

The company remains committed to completing its investigation and ensuring all necessary remediation actions are taken.

Based on reporting by Cyber Security News.