MathWorks has recently experienced a ransomware attack, which is causing outages and degradation for multiple services. The attack was confirmed on May 22nd by the Royal Institute of Technology (KTH), a Swedish institution for education and research. On May 25th, MathWorks announced what type of cyberattack they were hit by.
Issues first started showing up on May 18th and have continued to cause problems throughout the week, especially for MATLAB users. The timing of the cyberattack is challenging for U.S. users, as outages are persisting into a long holiday weekend for Memorial Day.
Update: As of June 5th, 2025, all MathWorks services and operations are working normally. In all, it took around 2 1/2 weeks to fully recover from this ransomware attack.
What Is MathWorks?
MathWorks is a company that builds software used by engineers, scientists, and educators worldwide. Its most well-known product is MATLAB, a programming platform for analyzing data, building models, and running simulations. MathWorks also makes Simulink, which helps people design and test systems used in cars, planes, and other technologies.
The company was founded in 1984 and is based in Natick, Massachusetts. MathWorks is privately owned and is widely used in schools, research labs, and industries. Its tools are designed to make complex technical work easier to understand and use.
When Did the MathWorks Ransomware Attack Happen?
Issues started showing up on May 18th. KTH first mentioned the cyberattack on May 22nd, and problems have continued to persist. MathWorks later confirmed they were hit by a ransomware attack. Their priority is likely to resolve the issues first, then further detail what happened and what they did to prevent a repeat incident.
MathWorks Ransomware Announcement:
MathWorks experienced a ransomware attack. We have notified federal law enforcement of this matter. The attack affected our IT systems. Some of our online applications used by customers became unavailable, and certain internal systems used by staff became unavailable, beginning on Sunday, May 18. We have brought many of these systems back online and are continuing to bring other systems back online with the assistance of cybersecurity experts.
KTH’s Initial Confirmation of the Cyberattack:
What MathWorks Services Are Impacted by the Cyberattack?
MathWorks has a running log of updates throughout the week via its status page. Users should review that page for the latest status updates on each service.
Services with Outages or Degradation:
- None
Services That Are Operating Normally:
- License Center
- Add-On Explorer
- Careers at MathWorks
- Cloud Center
- Cody
- Downloads
- File Exchange
- MathWorks Account
- MATLAB Answers
- MathWorks.com
- MATLAB Copilot
- MATLAB Drive
- MATLAB Grader
- MATLAB Grader – LTI® Service
- MATLAB Mobile
- MATLAB Online
- MathWorks Store
- MATLAB and Simulink Course Schedule
- Online Courses App
- Online Licensing
- ThingSpeak
Updated: June 5th, 2025
The cyberattack on MathWorks’ systems has affected MATLAB’s cloud-based tools, leading to widespread “no healthy upstream” errors. Some services, like MATLAB Online and MATLAB Mobile, were brought back online on May 23rd. Others, such as File Exchange, License Center, and MATLAB Grader, are still unavailable or are not working correctly. These platforms rely on cloud infrastructure to support a broad range of features.
Why Cyber Threats Are a Constant Risk
The recent cyberattack on MathWorks is a clear reminder that cyber threats are a constant risk for organizations. These attacks can happen in many different ways. Some begin with phishing emails. Others take advantage of weak passwords, outdated software, or flaws in cloud services. Human error is especially challenging, with 74% of CISOs saying it’s their top security concern. Because these threats can come from so many directions, they’re hard to predict and even harder to stop completely.
Cybercriminals often look for small gaps in security. Once attackers get in, the damage can spread quickly. They may shut down systems, steal data, or disrupt important services. That can impact everything from daily work to customer access. Ransomware attacks alone rose by 95% in 2023, according to the 2024 SonicWall Cyber Threat Report, showing just how quickly these threats are growing.
That’s why it’s so important for organizations to stay alert. Keeping software up to date, promoting strong security habits, and helping employees recognize threats can all make a big difference. These steps won’t stop every attack, but they help reduce the chances and limit the damage if one happens.
Tips to Defend Your Organization From Cyberattacks
Cyberattacks can cause severe disruptions, but there are steps your organization can take to reduce the risk. While no system is completely immune, good security habits go a long way in protecting your data, tools, and users.
Cybersecurity Tips:
- Keep software up to date. Regular software updates fix known bugs and security flaws that attackers often exploit.
- Use strong, unique passwords. Encourage the use of password managers and multi-factor authentication.
- Train employees on security basics. Simple awareness, like how to spot phishing emails, can stop many attacks before they start.
- Limit access to sensitive systems. Only give people access to the data and tools they actually need.
- Back up your data regularly. If systems are compromised, backups can help you recover faster.
- Monitor for unusual activity. Use tools that alert your team to signs of a breach or suspicious behavior.
- Create an incident response plan. Having a clear incident response plan helps your team respond quickly and effectively if an attack happens.
Cybersecurity is a shared responsibility. With the right tools, training, and awareness, your team can help keep systems safer and reduce the impact of potential threats.
Stay Protected with ITonDemand
The recent cyberattack on MathWorks shows how even well-known and trusted organizations can face serious cybersecurity threats. It’s also a reminder that staying secure is not a one-time task. It takes ongoing effort, the right tools, and the support of experienced professionals.
At ITonDemand, we work with businesses to avoid these threats through real-time monitoring and quick response. In one of our recent case studies, we stopped a ransomware attack in real time before it could shut down a client’s network. Our fast action prevented data loss and avoided costly downtime.
If you want to protect your systems, train your team, and be ready to respond to threats, we’re here to help. Explore our cybersecurity services and see how ITonDemand can help keep your business safe and running.
