Breach taxonomy
Summary
On or about March 27, 2024, OraSure Technologies became aware of a cybersecurity incident in which an unauthorized third party gained access to company data from certain information systems and exfiltrated certain files. The company initiated response protocols with cybersecurity experts and external counsel, notified law enforcement, and believes the incident has been contained with core financial and operational systems preserved. The extent of any personal information in the exfiltrated files was still under investigation at the time of filing.
Tagging rationale
ThreatUnknown
Filing does not attribute the incident to any specific threat actor → UNKNOWN.
MethodsData Exfil
Filing explicitly states the unauthorized third party gained access to company data and exfiltrated certain files.