MATLAB Hit by Ransomware Attack Impacting Over 5 Million Users

MathWorks, the developer of the widely used MATLAB computational platform, disclosed a ransomware attack that disrupted its IT infrastructure and left critical customer-facing applications temporarily inaccessible.

The incident, which also impacted internal operational systems, marks one of the most significant cybersecurity breaches targeting a scientific software provider.

With over 5 million users relying on MATLAB for engineering, academic research, and industrial applications, the attack has raised concerns about the vulnerability of essential scientific tools to cyber threats.

Federal law enforcement agencies are investigating the breach, while MathWorks works with cybersecurity experts to restore full functionality.

The ransomware attack

began in the early hours of May 18, 2025, targeting MathWorks’ backend servers and encrypted critical data across its networks.

By mid-morning, customers reported outages in MATLAB Online, Simulink Cloud, and the company’s licensing portal, which are central to running simulations, accessing toolboxes, and managing enterprise subscriptions.

Internal systems, including employee communication platforms and development environments, were also rendered inoperable, forcing teams to switch to contingency protocols.

MathWorks’ incident response team detected anomalous network traffic within hours and initiated containment procedures, isolating affected servers to prevent lateral movement of the ransomware.

By the evening of May 18, the company formally notified the Federal Bureau of Investigation (FBI) and Cybersecurity and Infrastructure Security Agency (CISA), triggering a joint investigation into the attack’s origin and scope.

While the ransomware variant remains unidentified, initial forensic analysis suggests the attackers exploited a combination of phishing vectors and unpatched vulnerabilities in third-party software integrated into MathWorks’ systems.

Operational Disruptions and Customer Implications

The outage had immediate repercussions for MATLAB’s global user base.

Academic institutions faced delays in research projects dependent on MATLAB’s parallel computing capabilities, while automotive and aerospace industries reported workflow interruptions in control system design and hardware-in-the-loop testing.

A biomedical engineering researcher at Johns Hopkins University noted, “Our team couldn’t access pre-trained machine learning models stored on MATLAB Drive, forcing us to postpone critical experiments.”

Internally, MathWorks’ development and customer support teams relied on manual workarounds to address urgent requests.

The company’s proprietary code repository, which houses over 100 million lines of MATLAB and Simulink code, remained offline for 72 hours, halting updates to toolboxes like Deep Learning HDL Toolbox and ROS Toolbox.

Security analysts speculate that the attackers exfiltrated limited amounts of data, though MathWorks has yet to confirm whether customer intellectual property or sensitive credentials were compromised.

Restoration Efforts and Cybersecurity Overhaul

As of May 28, 2025, MathWorks has restored 85% of customer-facing systems, including MATLAB Online and the File Exchange platform, with latency issues persisting in regions reliant on European data centers.

The company enlisted cybersecurity firms CrowdStrike and Mandiant to conduct network sweeps, decrypt affected systems, and implement zero-trust architecture to prevent recurrence.

A temporary licensing system has been deployed to allow offline activation of MATLAB, ensuring users without cloud access can continue work.

According to the Report, Federal investigators are analyzing blockchain transactions linked to the ransomware operators’ wallets, which reportedly received payments from three Fortune 500 companies in prior attacks.

MathWorks has not disclosed whether a ransom was paid but emphasized that decryption keys provided by the attackers played no role in recovery efforts.

Proactive measures now include mandatory multi-factor authentication for all customer accounts and AI-driven anomaly detection modules integrated into MathWorks’ DevOps pipelines.

The breach underscores the growing sophistication of ransomware campaigns targeting scientific and industrial software ecosystems.

With MATLAB serving as critical infrastructure for innovation across sectors, MathWorks’ response may set precedents for incident transparency and cross-agency collaboration in mitigating cyber threats to computational platforms.

Find this Story Interesting! Follow us on LinkedIn and X to Get More Instant Updates.

The post MATLAB Hit by Ransomware Attack Impacting Over 5 Million Users appeared first on Cyber Security News.