GRMN NASDAQ Ransomware

Garmin

A ransomware attack encrypted Garmin systems and interrupted online services, customer support, applications and company communications.

1 month vs SPY -2.8 pp Below SPY

+1.1% GRMN vs +3.9% SPY

DisclosureJul 23, 2020 · time unknown
Company’s roleDirect victim
Available data12 months complete
Share typeCommon stock · GRMN

This site shows how share prices moved after an incident became public. It does not prove that the incident caused the move. Company news, sector moves and the wider market can affect every result. Educational only — not investment advice.

Disclosure timing

When could the market react?

The baseline is the last adjusted close before the news was public. The reaction session is the first close afterward.

  1. 01Baseline sessionJul 22, 2020

    Normalized to 100 for both GRMN and SPY.

  2. 02Public disclosureJul 23, 2020 · time unknown

    Publication time is not documented; lower timing precision.

  3. 03First reaction closeJul 23, 2020

    -1.1% company total return versus -1.2% for SPY; +0.1 pp market-relative return.

Disclosure time is unknown; the previous session close is used as baseline.

Time windows

Company vs SPY

Each row uses the last trading session on or before its target date. “Market-relative” is the company return minus the SPY return, in percentage points.

Returns measured from the shared baseline session
WindowEndpointGRMNSPYMarket-relativeSignal
First reaction Jul 23, 2020 -1.1% -1.2% +0.1 pp Above SPY
+7 days Jul 30, 2020 -1.3% -0.9% -0.4 pp Below SPY
+1 month Aug 21, 2020 +1.1% +3.9% -2.8 pp Below SPY
+3 months Oct 23, 2020 +0.1% +6.2% -6.1 pp Below SPY
+6 months Jan 22, 2021 +23.6% +18.1% +5.5 pp Above SPY
+12 months Jul 23, 2021 +55.3% +36.6% +18.7 pp Above SPY
Compare with current catalog aggregates
WindowThis caseCatalog medianCatalog meann
First reaction+0.1 pp-0.8 pp-1.5 pp30
+7 days-0.4 pp-2.0 pp-4.0 pp30
+1 month-2.8 pp-6.6 pp-6.8 pp30
+3 months-6.1 pp-5.1 pp-6.6 pp30
+6 months+5.5 pp-5.6 pp-7.5 pp30
+12 months+18.7 pp-3.7 pp-10.1 pp30

Normalized total return

GRMN compared with SPY

Baseline session = 100. Adjusted close reflects splits and reinvested distributions.

Garmin had +55.3% company total return versus +36.6% for SPY; +18.7 pp market-relative return. The chart shows normalized adjusted-close performance for up to 24 months.

View tabular chart fallback
Representative normalized chart points, sampled approximately monthly
DateGRMNSPY
Jul 22, 2020100.0100.0
Aug 20, 2020101.6103.5
Sep 21, 202093.6100.4
Oct 20, 202098.1105.5
Nov 18, 2020113.5109.4
Dec 18, 2020119.2113.9
Jan 21, 2021123.5118.5
Feb 22, 2021127.4119.4
Mar 23, 2021126.5120.5
Apr 22, 2021139.5127.6
May 21, 2021140.2128.4
Jun 22, 2021143.4131.4
Jul 22, 2021152.2135.2
Aug 20, 2021171.7137.7
Sep 21, 2021168.2135.1
Oct 20, 2021164.1140.9
Nov 18, 2021146.2146.3
Dec 20, 2021131.4142.2
Jan 20, 2022125.3139.6
Feb 18, 2022116.4135.7
Mar 22, 2022121.2141.0
Apr 21, 2022115.8137.4
May 20, 2022102.9122.2
Jun 22, 202299.4117.9
Jul 22, 2022108.1124.4

Media attention · first 14 days

How this incident was covered

Written articles whose recorded headline explicitly names Garmin, recovered from a fixed panel of seven US publisher families. This is an observed lower bound, not a count of all coverage.

Qualifying articles 2 Unique article URLs in the 14-day window.
Publisher reach 2/7 Publisher families with at least one qualifying article.
Published by 72 hours 0.0% 0 of 2 recovered articles.
Published by day 7 100.0% 2 of 2 recovered articles.

Publication pace

  • First 48 hours0 · 0.0%
    0
  • 48–72 hours0 · 0.0%
    0
  • Days 4–72 · 100.0%
    2
  • Days 8–140 · 0.0%
    0

Publisher mix

  • CNN0
    0
  • Fox1
    1
  • Bloomberg0
    0
  • Washington Post0
    0
  • Wall Street Journal0
    0
  • Reuters0
    0
  • CNBC1
    1
Headline framing

What the recorded headline emphasized

These local labels describe headline wording. They do not measure reader sentiment, publisher stance, blame, or reputational impact.

DescriptiveIdentifies or explains the event.
1
Adverse eventEmphasizes theft, disruption, loss, harm, or failure.
0
Mitigation or actionEmphasizes protection, investigation, recovery, a fix, or limited scope.
1
FavorablePresents an affirmatively favorable outcome for the selected company.
0

Sources checked 2026-07-22 · 0 archive copies

Price recovery

Recovered

Here, recovery only means that adjusted close reached the baseline again. It does not mean every effect of the incident ended.

State
Recovered
Initial trough
-4.5% on Jul 24, 2020
Recovery close
Aug 5, 2020
Calendar days
13
Observation cap
24 months after disclosure

Hypothetical $1,000

What would $1,000 have looked like?

Compare $1,000 in GRMN with $1,000 in SPY, bought and measured on the same dates.

GRMN value $1,183 Garmin
SPY value $1,168 US market benchmark
Difference vs SPY $15 Observed result

Entry Jul 27, 2020 Exit Jan 27, 2021

Uses fractional shares and adjusted close. Leaves out taxes, fees and slippage. The holding period starts on the purchase date. This is a historical illustration, not an investment strategy.

Case note

Garmin publicly acknowledged a broad service outage on July 23 and later confirmed that a cyberattack had encrypted some systems. Garmin Connect, support, customer applications and company communications were among the affected services.

Two independent contemporaneous reports anchor the initial public date; the later issuer statement confirms cause and scope. Garmin traded on Nasdaq at the event even though its present exchange is different.

Evidence

Sources and case review

We qualify each case before checking its price results. These links support the disclosure date, listing, incident and business impact.

  1. primary Jul 27, 2020
    Garmin issues statement on recent outage Garmin Ltd. Supports: Listing, Impact, Description
  2. secondary Jul 23, 2020
    Garmin outage caused by confirmed WastedLocker ransomware attack BleepingComputer Supports: Disclosure, Timing, Impact
  3. secondary Jul 23, 2020
    Garmin down: what happened during the outage TechRadar Supports: Disclosure, Timing
  4. Listing evidenceChecked Jul 20, 2026
    Garmin statement on recent outage Garmin Ltd. The issuer release identifies Garmin as Nasdaq: GRMN; the company later transferred exchanges after the event.

Why it is included. Garmin directly suffered an encryption attack whose outage affected multiple customer-facing and operational services worldwide, providing a clear disruption signal independent of its later materiality assessment. Reviewed Jul 20, 2026.