Garmin cyberattack disrupts online services, no evidence of customer data breach

Garmin Ltd., a manufacturer of GPS navigation devices and wearable fitness technology, disclosed Monday that a cyberattack last week disrupted several of its systems, temporarily affecting online services while leaving customer data uncompromised.

The company said the incident began Thursday when some of its systems were encrypted by an external actor, leading to outages across multiple platforms. Affected services included website functionality, customer support channels, user-facing applications, and internal communications.

Garmin initiated an immediate response to investigate the nature of the attack and begin remediation efforts. The disruption extended to Garmin Connect, the company’s platform that enables users to track and analyze fitness activities such as running and cycling through its mobile app and website.

During the outage, Garmin experienced a temporary inability to process customer communications, including phone calls, emails, and online chat inquiries.

The company stated that there is no indication customer data, including payment information, was accessed or exfiltrated. It also confirmed that the core functionality of Garmin devices remained unaffected, aside from the inability to connect to online services during the disruption.

Garmin has not disclosed how many users were impacted by the incident, and details about the nature of the attack remain limited.