Medical Device Maker Surmodics Recovering From Attack

Latest Medical Device Vendor to Disclose a Recent Cyber Incident Marianne Kolbasuk McGee (HealthInfoSec) • July 3, 2025

A Minnesota maker of catheters notified federal regulators it is recovering from a cyberattack discovered in early June that rendered a portion of its IT systems and data inaccessible.

See Also: Beyond Replication & Versioning: Securing S3 Data in the Face of Advanced Ransomware Attacks

Surmodics, which also manufacturers diagnostic tests, drug delivery coatings and other specialty medical device products in a Wednesday filing with the U.S. Securities and Exchange Commission did not specifically mention ransomware. The company, whose surface modification technology is used for more than 150 commercial medical device product offerings, reported $33.2 million in revenue during 2024.

Surmodics said it discovered on June 5 that threat actors gained unauthorized access to some IT systems "and that certain IT systems and data were unavailable to the company ...