IMI plc, a Birmingham-based precision engineering group and FTSE 100 constituent, told the London Stock Exchange on February 6, 2025 that it was responding to a cyber security incident involving unauthorised access to its systems.
The regulatory notice was brief. IMI said that as soon as it became aware of the unauthorised access it engaged external cyber security experts to investigate and contain the incident, and that it was taking the steps needed to meet its regulatory obligations. The company said further information would be provided as and when appropriate, and declined to expand on the nature or impact of the intrusion when asked by SecurityWeek.
IMI supplies fluid and motion control technology to sectors including industrial automation, climate control, life sciences and transport, and operates manufacturing sites in a number of countries. The disclosure came nine days after Smiths Group, another British engineering firm, told the exchange it had detected unauthorised access to its network, isolated the affected systems and activated business continuity plans.
Neither company named an attacker. As of the reporting date no known ransomware group had claimed either intrusion, and SecurityWeek reported that it was unclear whether ransomware had been deployed or extortion attempted in either case. IMI did not disclose whether any data had been stolen or whether operations had been disrupted.