Leading heart surgery medical device manufacturer Artivion has reported a significant ransomware attack that occurred on November 21, forcing the company to temporarily suspend some of its operations. The Atlanta-based multinational, which operates in over 100 countries with manufacturing facilities in Atlanta, Austin, and Hechingen, Germany, employs more than 1,250 people globally.

According to an SEC filing, the cyber incident resulted in file encryption and data theft from company systems. Artivion immediately implemented response measures, including system isolation and engagement of cybersecurity, legal, and forensics experts to manage the situation.

While the company has largely restored its corporate operations, order processing, and shipping capabilities, it anticipates additional costs beyond insurance coverage. The identity of the ransomware group remains undisclosed, though public disclosure may follow if ransom demands are not met.

This attack adds to a series of recent cybersecurity incidents in the U.S. healthcare sector, including:
– BianLian gang’s attack on Boston Children’s Health Physicians
– UMC Health System’s patient diversion incident in September
– Anna Jaques Hospital’s data breach affecting 310,000 patients

The incident highlights the ongoing vulnerability of healthcare organizations to ransomware attacks and the critical importance of cybersecurity measures in the medical device industry.