What happened to Surmodics?

Surmodics, a Minnesota-based medical device manufacturer specializing in catheters, diagnostic tests, and drug delivery coatings, experienced a cyberattack that rendered portions of its IT systems and data inaccessible. The attack exhibited characteristics typical of ransomware operations.

When was the Surmodics cyberattack discovered?

The company discovered the cybersecurity incident on June 5, 2024, when they identified that certain IT systems and data were unavailable to the company.

What type of company is Surmodics?

Surmodics is a Minnesota-based medical device manufacturer that specializes in catheters, diagnostic tests, and drug delivery coatings. The company serves the healthcare industry with specialized medical device technologies and solutions.

What type of cyberattack did Surmodics experience?

The attack exhibited characteristics typical of ransomware operations. The company reported that 'certain IT systems and data were unavailable,' which typically indicates encryption by ransomware, though the specific nature of the attack has not been fully disclosed.

Was Surmodics able to continue operations after the cyberattack?

Yes, Surmodics continued accepting customer orders and shipping products by implementing alternative IT systems. This demonstrates the company's business continuity planning and ability to maintain operations despite the cybersecurity incident.

Has any data been exposed in the Surmodics cyberattack?

The nature of the attack, any exposed data types, and the number of affected individuals have not been disclosed by Surmodics. The company is still investigating the incident to determine the full scope and impact.

Which ransomware group was responsible for the Surmodics attack?

As of the time of publication, no ransomware group has claimed responsibility for the attack on Surmodics. The investigation is ongoing to determine the specific threat actors involved.

How did Surmodics respond to the cyberattack?

Surmodics engaged external cybersecurity experts to assist with containment, investigation, and remediation of the incident. The company also notified law enforcement authorities about the cyberattack and implemented alternative IT systems to maintain business operations.

Were law enforcement authorities notified about the Surmodics incident?

Yes, Surmodics notified law enforcement authorities about the cybersecurity incident as part of their response protocol. This is standard practice for significant cyberattacks, especially those affecting healthcare-related companies.

What does it mean that Surmodics' systems and data were 'unavailable'?

When a company reports that 'certain IT systems and data were unavailable,' this typically indicates that the systems have been encrypted by ransomware, making them inaccessible to the organization until the encryption is removed or systems are restored from backups.

Is Surmodics working with cybersecurity experts?

Yes, Surmodics has engaged external cybersecurity experts to assist with the containment, investigation, and remediation of the cybersecurity incident. This professional assistance is crucial for properly responding to and recovering from sophisticated cyberattacks.

What products does Surmodics manufacture that could be affected?

Surmodics specializes in manufacturing catheters, diagnostic tests, and drug delivery coatings for the medical device industry. While the company maintained operations using alternative systems, any disruption to a medical device manufacturer could potentially impact healthcare supply chains.

What should healthcare providers using Surmodics products know?

Healthcare providers should monitor communications from Surmodics regarding any potential impacts to product availability or delivery schedules. While the company has maintained operations, providers should verify the status of any pending orders and be prepared for potential delays or communication disruptions.

When might more details about the Surmodics cyberattack be available?

More details about the cyberattack, including the scope of any data exposure and the number of affected individuals, will likely be disclosed as Surmodics completes its investigation with the assistance of external cybersecurity experts and determines the full impact of the incident.

What makes cyberattacks on medical device companies particularly concerning?

Cyberattacks on medical device companies are particularly concerning because they can disrupt healthcare supply chains, potentially affect patient care, and may expose sensitive healthcare-related information. The continuity of medical device manufacturing and distribution is critical for healthcare systems worldwide.

Advisory

Medical device manufacturer Surmodics hit by cyberattack, suspected ransomware

published: July 4, 2025

Learn More

Surmodics, a Minnesota-based medical device manufacturer specializing in catheters, diagnostic tests, and drug delivery coatings, is reporting a cyberattack that rendered portions of its IT systems and data inaccessible.

The company discovered the incident on June 5, 2024. The attack exhibited characteristics typical of ransomware operations. Surmodics is reporting that "certain IT systems and data were unavailable to the company" following the breach. This wording typically means encryption by ransomware.

The company continued accepting customer orders and shipping products by implementing alternative IT systems.

The nature of the attack, any exposed data types or number of affected individuals are not disclosed. As of time of this publication no ransomware group has claimed responsibility. Surmodics has engaged external cybersecurity experts to assist with containment, investigation and remediation of the incident. Law enforcement authorities were notified.

Medical device manufacturer Surmodics hit by cyberattack, suspected ransomware