2024-04-12 ORASURE TECHNOLOGIES INC Cybersecurity Incident

Page last updated on April 13, 2024

ORASURE TECHNOLOGIES INC initially disclosed a cybersecurity incident in an SEC 8-K filing on 2024-04-12 16:45:30 EDT.

Company Summary

OraSure Technologies is a Bethlehem, Pennsylvania–based company in the medical device industry. Their products include diagnostic testing kits. The company had recently developed OraQuick testing kit, the first over-the-counter home HIV test.(Source: Wikipedia)

Incident Details

Material: No
Is Breach: Unknown
Records Compromised: Unknown
Data Types Impacted: No Data Types Tracked (yet)

Compromised Date:
Detected Date: 2024-03-27
Disclosure Date: 2024-04-12
Contained Date: 2024-04-12
Recovered Date:

Attack Goal: Unknown

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2024-04-12

ORASURE TECHNOLOGIES INC filed an 8-K at 2024-04-12 16:45:30 EDT
Accession Number: 0001193125-24-094797

Item 1.05 Material Cybersecurity Incidents.

On or about March 27, 2024, OraSure Technologies, Inc. (the “Company”) became aware of a cybersecurity incident in which an unauthorized third party gained access to Company data from certain information systems. Following detection of the incident, the Company initiated response protocols, commenced an investigation with the assistance of cybersecurity experts and external counsel, and notified law enforcement. The Company believes it has contained the incident and believes it has preserved the integrity of its core financial and operational systems.

Although the Company ascertained that certain files were exfiltrated, it is still investigating the extent of any sensitive information contained within the accessed systems, including any personal information. It is evaluating what, if any, regulatory and legal notifications are required as a result of this incident and will make such notifications as required based on its findings.

As of the date hereof, the incident has not had a material impact on the Company’s operations, financial systems, or its financial condition. The Company’s information systems are operational, and it does not anticipate that this incident will have a material impact on its financial condition and results of operations moving forward. While the Company believes it has contained the incident, it continues to investigate this matter to determine the full extent of the impact on the Company.

Company Information