FEDERALItem 8.01 · voluntaryMalwareHealthcareManufacturingHealthcareRansomwareData EncryptedLowActive

ARTIVION, INC.

bd_a1a3b4415f6f03fd · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 21, 2024

Filed

Dec 9, 2024

To disclose

18 days

Affected

Not disclosed

Confidence

67%

Full breach record for ARTIVION, INC. →3 incidents on file

Artivion, Inc. disclosed a cybersecurity incident on December 9, 2024, involving the acquisition and encryption of files. The company identified the incident on November 21, 2024, took systems offline, and engaged external legal, cybersecurity, and forensic advisors. The incident caused disruptions to order and shipping processes, though largely mitigated. Artivion stated the incident has not yet had a material financial impact but expects uninsured costs.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 18 days

Nov 21, 2024

Discovered

Dec 9, 2024

Filed

vs. sector median

9 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: ARTIVION, INC.
norm: artivion
SEC CIK: 0000784199
Domain: artivion.com

Name: ARTIVION, INC.
norm: artivion
SEC CIK: 0000784199
Domain: artivion.com
Industry: HealthcarellmManufacturingllm

Discovered: Nov 21, 2024
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: —
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Taking certain systems offline
Initiating an investigation
Engaging external advisors, including legal, cybersecurity, and forensics professionals
Changes made: Working to securely restore its systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/784199/000078419924000253/aort-20241209.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Dec 9, 2024
Raw hash: 602e6daf67b52e094d878022c89ad17b193ce4b8ade34ba4b0eb7d4a9a496b62

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html28.2 KB

Download View at source

Reporting entityARTIVION, INC.

Victim entityARTIVION, INC.

Incidentdiscovered Nov 21, 2024

Stated responseTaking certain systems offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing