On or about March 27, 2024, OraSure Technologies (NASDAQ: OSUR) became aware of a cybersecurity incident in which an unauthorized third party accessed company data from certain information systems. After detecting the incident, we initiated response steps, initiated an investigation with the assistance of cybersecurity experts and external legal counsel, and notified law enforcement. The Company believes that the incident has been contained and the integrity of its core financial and operational systems has been maintained.
We have confirmed that certain files were compromised and are currently investigating the extent of sensitive information, including personal information, contained within the accessed systems. We are evaluating what regulatory and legal notices, if any, are required as a result of this incident and will issue such notices as appropriate based on our findings.
As of the date of this document, this incident has not had a material impact on our operations, financial systems or financial condition. Our information systems are operational, and we do not expect this incident to have a material impact on our future financial condition or business performance. Although we believe we have contained the incident, we are continuing to investigate this matter to understand the full extent of its impact on our company.
