DisclosureLens
HackingHealthcareManufacturingHealthcareVulnerability ExploitTargetedData ExfiltratedIdentity (basic)Government IDFinancial accountMediumContained

ARTIVION, INC.

bd_d2a13a58126d56f1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 9, 2025

Filed

Jul 9, 2025

To disclose

4 weeks

Affected

3state residents only

Linked

8 filings

Confidence

66%
Full breach record for ARTIVION, INC.3 incidents on file

Artivion, Inc. reported a security incident where an unauthorized third party gained access to its network between Nov 20-21, 2024. The breach affected 3 Maine residents, exposing names, SSNs, driver's licenses, and direct deposit info. Artivion detected the incident, engaged outside experts, and notified residents on July 9, 2025, offering 24 months of credit monitoring.

Maine clockDiscovered Jun 9, 2025Filed with AG Jul 9, 202530d ME AG ≤30d4 weeks discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 201 days
discovery → filing · 4 weeks / 30 days

Nov 20, 2024

Begins

Jun 9, 2025

Discovered

Jul 9, 2025

Filed

vs. sector median

8 wks faster

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Show 3 more filingsup to 6d gap

Filing propagation · 8 filings · 8 states

View merged incident ↗
Nebraska State AGJul 9 · first
Vermont State AGJul 9 · first
Indiana State AGJul 9 · first
Maine State AGJul 9 · first · this page

Pattern: first filing Jul 9 (NH), last Jul 15 (CA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.