10TH DEC 2024
Artivion, a prominent manufacturer of heart surgery medical devices, announced that a ransomware attack on November 21 significantly disrupted its operations and led to several systems being taken offline.
Headquartered in Atlanta, Georgia, the company employs over 1,250 personnel globally and operates in more than 100 countries. Artivion's production facilities are located in Atlanta; Austin, Texas; and Hechingen, Germany.
In a filing submitted to the U.S. Securities and Exchange Commission (SEC) on Monday, Artivion detailed its response to the incident.
"Artivion's response measures included taking certain systems offline, initiating an investigation, and engaging external advisors, including legal, cybersecurity, and forensics professionals to assess, contain, and remediate the incident," the company disclosed.
Although Artivion did not explicitly mention ransomware in its SEC filing, it confirmed that attackers encrypted systems and exfiltrated sensitive data.
"The incident involved the acquisition and encryption of files. The company is working to securely restore its systems as quickly as possible and to evaluate any notification obligations," Artivion stated.
Despite the attack, the company has mostly resolved disruptions to corporate operations, order processing, and shipping. While insurance is expected to cover a portion of the response costs, Artivion acknowledged that some expenses may not be reimbursed.
The cyberattack on Artivion follows a series of ransomware incidents targeting U.S. healthcare organizations. Recent victims include:
Boston Children's Health Physicians (BCHP): The BianLian ransomware gang threatened to leak stolen files unless a ransom is paid.
UMC Health System: A ransomware attack forced the healthcare provider to divert patients in September.
Anna Jaques Hospital: Earlier this month, the hospital confirmed a ransomware attack last Christmas that exposed sensitive data of over 310,000 patients.
While no ransomware group has claimed responsibility for the Artivion breach, experts speculate that the perpetrators may reveal themselves if their ransom demands remain unmet in the coming weeks.
Ransomware attacks continue to pose significant challenges to the healthcare and medical manufacturing sectors, emphasizing the urgent need for robust cybersecurity measures. Organizations must remain vigilant and invest in advanced security solutions to mitigate the risks of such attacks.
