One of the largest manufacturers of forklifts has been forced to shut down its operating systems following a cyberattack.

Crown Equipment said in a statement Wednesday that it experienced a cyberattack and is in the process of investigating the incident, attributing the attack to an unnamed “international cybercriminal organization.” 

The company — which is a major player in the defense industry and reported more than $4 billion in revenue last year — said it is working with federal law enforcement to determine the next steps. 

“The company is still working through the disruption caused by the attack and is making progress toward transitioning to normal business operations,” the company said.

“Crown is also working closely with its customers to help reduce the effect the incident may have on their operations.” 

The Ohio-based company employs nearly 20,000 people at about 24 plants across the globe. 

The news outlet Born City reported that Crown Equipment has faced significant operational disruption since June 8 and that it is dealing with a ransomware attack. Employees of the company took to the comment section of news stories and Reddit to complain about a lack of information from Crown.

Hourly workers have also lost out on pay since operations at the company’s factories have ground to a halt. Some have reported being told to file for unemployment insurance while the company tries to restore its operations. 

The outlet Bleeping Computer obtained an email sent to employees Tuesday that claimed the attack originated from an employee that “failed to adhere to our data security policies by allowing unauthorized access to their device.”