ENGLOBAL CORP

Item 1.05 Material Cybersecurity Incidents. On November 25, 2024, ENGlobal Corporation (the “Company”) became aware of a cybersecurity incident. The preliminary investigation has revealed that a threat actor illegally accessed the Company’s information technology (“IT”) system and encrypted some of its data files. Upon detecting the unauthorized access, the Company immediately took steps to contain, assess and remediate the cybersecurity incident, including beginning an internal investigation, engaging external cybersecurity specialists, and restricting access to its IT system. As a result of these and other measures, and while the investigation and remediation efforts remain ongoing, access to the Company’s IT system is limited to essential business operations. The timing of restoration of full access to the Company’s IT system remains unclear as of the date of this filing. The Company has not yet determined whether the cybersecurity incident is reasonably likely to materially impact the Company’s financial condition or results of operations. Cautionary Note Regarding Forward-Looking Statements This Current Report on Form 8-K contains forward-looking statements within the meaning of the Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934, as amended. These statements address the Company’s expectations or beliefs regarding future events, actions or performance, including the containment, assessment and remediation of the cybersecurity incident, the restoration of full access to the Company’s IT system and the impact on the Company, including its financial condition and results of operations. Factors that could affect future developments and performance include the completion of the Company’s investigation, the po