BOSTON, Mass., October 8, 2026 -- Ginkgo Bioworks Holdings, Inc. (we," "us," "our" and "the Company") recently discovered an unauthorized third party accessed data ("Affected Data") from cloud environments primarily associated with the Company's former biosecurity business. We took immediate steps to secure our systems and investigate the situation.

What actions we took

• We launched an investigation with assistance from an independent third-party cybersecurity response team and forensic experts at a leading national forensic firm, together with outside counsel. The investigation is ongoing.
• We implemented our cybersecurity response plan consistent with our previously established cyber incident protocols.
• We informed the FBI of this incident and are cooperating with federal law enforcement in the investigation.
• We believe we have notified all of our customers whose data was included in the Affected Data and are evaluating applicable regulatory and legal notification requirements. We intend to make all required notifications based on our findings.

What we know about the affected data

At this time, we believe the Affected Data involved was primarily from legacy cloud environments. We promptly terminated the third party's access and began mitigation measures such as rotating credentials. We have found no evidence that the third party has continued access to the affected environments and at this time found no evidence that the third party accessed environments other than the one holding the Affected Data. While some legacy systems were temporarily taken offline as a precautionary measure, there has been no interruption to our core systems, including our financial systems. This was not a ransomware or encryption event, and the Company's operations have not been disrupted to date.

About Ginkgo Bioworks

Ginkgo Bioworks builds the tools that make biology easier to engineer for everyone. The company offers autonomous laboratories that replace manual laboratory work with robotics in the lab, greatly improving the productivity of scientists. Ginkgo's in-house autonomous lab is also available as a "Cloud Lab" through our Datapoints and Solutions contract research services. For more information, visit ginkgobioworks.com, read our blog, or follow us on social media channels such as X (@Ginkgo), Instagram (@GinkgoBioworks), Threads (@GinkgoBioworks), or LinkedIn.

Forward-Looking Statements

This announcement contains forward-looking statements regarding the ongoing nature of the Company's investigation, the Company's preliminary findings regarding the scope of the incidents, the status of the affected environments, and the Company's intentions to make all required notifications. Factors that could cause actual results to differ from those expressed in these forward-looking statements include: findings from the ongoing investigation of the incident; actions taken by the third party, including any publication of data; the potential consequences resulting from the incident or additional cybersecurity incidents; and the risks described in the Company's Annual Report on Form 10-K for the year ended December 31, 2025, as filed with the U.S. Securities and Exchange Commission ("SEC") on February 26, 2026, and other documents filed by the Company from time to time with the SEC. All forward looking statements are based on information and estimates available to us as of the date hereof. Unless required by law, the Company expressly disclaims any obligation to update publicly any forward-looking statements, whether as result of new information, future events or otherwise.

GINKGO BIOWORKS INVESTOR CONTACT:

[email protected]

GINKGO BIOWORKS MEDIA CONTACT:

[email protected]

# # #