Artivion Inc., a multinational medical device company specializing in aortic and vascular surgical products, experienced a major data breach affecting current and former employees' and their families' information. The data breach took place between Nov. 20 and Nov. 21, 2024 when an unauthorized actor obtained files with personal data.
The investigation into the cybersecurity incident was completed on June 9, 2025 and determined both personally identifiable information (PII) and protected health information (PHI) was compromised in the breach. Exposed information includes names, dates of birth, Social Security number, driver's license and/or passport numbers, direct deposit information and health insurance information.
Artivion began notifying impacted current and former employees by mail on July 9, 2025. The data breach was reported to the Maine, Texas and Vermont Attorney Generals' offices beginning on July 9, 2025.
The total number of impacted individuals has not been released but is in the thousands. Affected current and former Artivion employees include 5,608 Texas residents and three in Maine. The wide range of sensitive data compromised, including personal, financial and health-related information, indicates a severe breach with the potential for identity theft, financial fraud and medical identity misuse.
In addition to required state and federal disclosures, Artivion is offering two free years of credit monitoring and identity protection services to individuals whose Social Security, driver's license or passport numbers were compromised in the data breach.
If you receive a data breach notice from Artivion, you may want to:
More information about the company can be found on the Artivion website.