FEDERALItem 1.05 · mandatoryHackingHealthcareManufacturingManufacturingMedical InstrumentsData ExfiltratedPIILowContained

OraSure Technologies, Inc.

bd_fcad5a27e32da295 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 27, 2024

Filed

Apr 12, 2024

To disclose

16 days

Affected

Not disclosed

Linked

6 filings

Confidence

67%

Full breach record for OraSure Technologies, Inc. →

OraSure Technologies, Inc. disclosed a cybersecurity incident on April 10, 2024, where an unauthorized third party gained access to company data and exfiltrated certain files. The company became aware of the incident on March 27, 2024. It has contained the incident and is investigating the extent of sensitive information accessed, including potential personal data. No material impact on operations or financial condition has been reported to date.

J jump to incidentP pin to compareR raw source

SEC clockMateriality determined Apr 10, 2024 → Filed Apr 12, 20242d ✓ SEC 4-day OK16 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 16 days

Mar 27, 2024

Discovered

Apr 10, 2024

Scope determined

Apr 12, 2024

Filed

vs. sector median

10 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_ab9328e9ee8596502024-07-09 · +88dVerified
Vermont State AGbd_da976f411163d4142024-07-09 · +88dCandidate
Massachusetts State AGbd_21b9cd0a5d2be6222024-08-07 · +117dVerified
New Hampshire State AGbd_4933ee81053b39d92024-08-07 · +117dVerified

Show 1 more filing ↓up to 117d gap

Montana State AGbd_e3ea8aec4d6b7af92024-08-07 · +117dVerified

Name: OraSure Technologies, Inc.
norm: orasure technologies
SEC CIK: 0001116463
Domain: orasure.com

Name: OraSure Technologies, Inc.
norm: orasure technologies
SEC CIK: 0001116463
Domain: orasure.com
Industry: Healthcarenaics mapManufacturingnaics map
NAICS 339112 · Surgical and Medical Instrument Manufacturing

Discovered: Mar 27, 2024
Materiality determined: Apr 10, 2024
Notification sent: —
Affected individuals: Not disclosed
Data types: PII
Attack vector: Unknown
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified law enforcement

During the incident: Initiated response protocols
Commenced an investigation with the assistance of cybersecurity experts and external counsel
Notified law enforcement
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 days(16 days from discovery to filing)
Compliance flags: SEC 4-day OK · 2d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
SEC
Materiality determined: Apr 10, 2024
→ Filed: Apr 12, 2024
2d cal. 4 business days SEC 4-day OK

Statute	Window	Elapsed	Threshold	Status
SEC	Materiality determined: Apr 10, 2024 → Filed: Apr 12, 2024	2d cal.	4 business days	SEC 4-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

SEC 8-KApr 12 · first · this page

Indiana State AG+88d

Vermont State AG+88d

Massachusetts State AG+117d

New Hampshire State AG+117d

Montana State AG+117d

Pattern: first filing Apr 12, last Aug 7 (MT) — a 117-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/1116463/000119312524094797/d825009d8k.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Apr 12, 2024
Raw hash: f026f41f78c0e6cded8a0e1c19e9a645e3fc41b5493ce35711a6c5661ab65891

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html28.5 KB

Download View at source

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityOraSure Technologies, Inc.

Victim entityOraSure Technologies, Inc.

Incidentdiscovered Mar 27, 2024

Stated responseInitiated response protocols

ComplianceSEC 4-day OK

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing