OraSure Technologies, Inc.

On or about March 27, 2024, OraSure Technologies became aware of a cybersecurity incident in which an unauthorized third party gained access to Company data and exfiltrated certain files. The Company initiated response protocols, engaged cybersecurity experts and external counsel, notified law enforcement, and believes it has contained the incident. Investigation continues to determine whether personal or sensitive information was affected; no material financial impact reported.

OraSure Technologies Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-03-25 and was reported on 2024-07-09. 4 Indiana residents were affected. 1,701 individuals affected in total.

Affected (this filing): 1,701

OraSure Technologies, Inc. notified consumers of a data breach involving unauthorized access to personal information. The notice, filed with the Vermont Attorney General on July 9, 2024, references impacted residents in multiple states including Vermont, Maryland, New York, and Rhode Island. Affected data includes identity information such as names and government IDs. The company engaged TransUnion for consumer support and stated there is no evidence of misuse.