Artivion Gets Pwned In What Sounds Like A Ransomware Attack

On Monday, medical device manufacturer Artivion filed documents with the SEC disclosing a cybersecurity incident they discovered on November 21 forcing the company to take some systems offline.

Artivion says the cybersecurity incident has caused “disruptions to some order and shipping processes, as well as to certain corporate operations, which have largely been mitigated.”

In the 8-K filing, the company also said the “cybersecurity incident” involved the “acquisition and encryption” of data but has yet to confirm the nature of the incident and no ransomware gang has taken credit for the incident.

Artivion manufactures implantable tissues for cardiac and vascular transplant applications, has manufacturing plants in Georgia, Texas and Germany, and ships products to over 100 countries.

Emily Phelps, Director, Cyware had this to say:

  “Healthcare organizations, including medical device manufacturers, face unique challenges in securing their operations against increasingly sophisticated cyber threats. The ability to effectively manage and share threat intelligence is crucial to mitigating the impact of such incidents, especially in a sector where disruptions can have life-altering consequences for patients. By adopting a more collaborative and intelligence-driven approach, healthcare entities can identify threats earlier, enhance their defenses, and build resilience across the ecosystem. Cybersecurity isn’t just a technical challenge; it’s a collective responsibility that demands real-time information exchange and proactive coordination to safeguard critical processes and data.”

It will be interesting to see what data was swiped and what happened to that data. I say that because this sounds like a ransomware attack, and when that happens data is almost always swiped. This one clearly requires me to keep an eye on it.

Leave a Reply

Discover more from The IT Nerd

Subscribe now to keep reading and get access to the full archive.

Continue reading