Surmodics, Inc. (SRDX) filed an 8-K on July 2, 2025, disclosing a cybersecurity incident discovered on June 5, 2025. A third-party threat actor gained unauthorized access to certain IT systems, causing temporary unavailability. The company took systems offline, engaged third-party experts, and notified law enforcement. Critical systems were restored, and operations continued via alternatives. The company states the threat actor has not released data to its knowledge, though it continues to analyze the scope of accessed data.