Following our statement of 5 May 2026, we are providing a further update regarding the recent cyber incident.

Upon identification of the incident, ALS implemented immediate technical and organisational containment measures in accordance with its incident response protocols. These measures included enhanced monitoring of network activity, isolation of affected environments and securing unaffected systems.

ALS operations have been restored, and containment activities are complete.

Importantly, ALS client portals are operating as normal and are secure to use. Our email and communications systems were also not impacted by this incident and continue to operate as normal, and it remains safe to communicate with us.

We continue to work closely with our internal teams and external cyber security specialists to understand the full scope of the incident, including assessing whether there has been any impact to data. If we identify that any client information has been impacted, we will contact relevant parties directly and immediately.

We will continue sharing further relevant information as it becomes available, with a focus on ensuring any information we communicate is accurate and verified.

If you have any questions in the meantime, please speak with your usual ALS representative or submit an enquiry via the contacts section below.

ALS Limited (ASX: ALQ) has recently identified malicious cyber activity involving unauthorised third-party access to some of our IT systems.

The incident caused temporary disruption to parts of the Group’s operations.

Our IT and security teams, supported by external cyber incident response specialists, immediately took and continues to deploy containment action, in line with our incident response procedures.

The vast majority of ALS operations have been restored and are currently operational, with targeted remediation continuing in specific areas.

We have also notified the Australian Cyber Security Centre and will coordinate with our clients, relevant government agencies and regulators.

The security and privacy of all information entrusted to us is a responsibility we take seriously. ALS continues to investigate the incident to understand the full extent and potential impacts to data and is working as quickly as possible to provide certainty for all stakeholders.

This announcement was authorised for release by the Chair of the Board.

Our IT and security teams, supported by external cyber incident response specialists, took immediate containment action when the incident was identified, and continue to do so in line with our incident response procedures. ALS continues to investigate the incident to understand the full extent and potential impacts to data and is working as quickly as possible to provide certainty for all stakeholders.

Please contact your usual ALS representative or refer to the contact details provided on this page.