Surmodics, Inc.

Surmodics, Inc. is also known as Surmodics. The company's headquarters is located in the United States of America. On June 5, 2025, Surmodics discovered that a third party gained unauthorized access to certain of its information technology systems. The unauthorized access rendered some systems and data unavailable. Surmodics promptly initiated containment measures. The containment measures included taking affected systems offline. The containment measures also included activating its security incident response plan. Surmodics notified law enforcement about the incident. The company worked with external IT experts to contain, assess, and remediate the incident. Critical systems have been restored. Data validation is currently underway.

Remaining systems and data are being restored according to a recovery plan. Order acceptance and product shipment continue without material impact. Alternative processes are being used to allow order acceptance and product shipment to continue. Ongoing analysis of the accessed data shows no evidence of data release. Ongoing analysis of the accessed data shows no evidence of fraudulent use. The company expects its cyber insurance to cover most related expenses. The company remains exposed to risks related to process adequacy during disruption. The company remains exposed to risks related to management distraction. The company remains exposed to risks related to potential litigation. The company remains exposed to risks related to shifts in customer behavior. The company remains exposed to risks related to regulatory scrutiny.