Healthcare

October 11, 2025

Bohemia, New York-based custom medical manufacturer, Designs For Vision Inc., suffered a ransomware attack in October and discovered it in December.
On November 3, the ransomware group Akira claimed responsibility for the attack on Designs for Vision, Inc., a leading optical solutions provider based in the United States.
As a result of the hack, the attackers threatened to release 50GB of sensitive data unless their demands end up met. “We will upload about 50gb of corporate documents soon,” Akria attack group said on a web page regarding the Designs for Vision attack. “Lots of project information, a bit of personal information, credit cards de tails and other financial and accounting information, contracts and agreements, NDA, etc.”
Designs For Vision experienced the attack between October 11, 2025, and October 13.

November 20, 2024

Kennesaw, Georgia-based medical device maker, Artivion, Inc. just finished an investigation into a ransomware attack where a threat actor gained access to its network and forced the company to shut down systems.
“Upon learning of the incident, Artivion immediately initiated its incident response protocols, including shutting down systems as a protective measure, and began an investigation with outside cyber experts,” the company said in a letter to victims. “The investigation determined that an unauthorized third-party gained access to Artivion’s network between November 20 and November 21, 2024, and obtained certain files.”
Artivion said it conducted a detailed review and analysis of the files involved to identify individuals whose information was a part of the attack. It also had to confirm victims’ contact information. The attack had an impact on its operations including disruptions to some order and shipping processes, as well as to certain corporate operations.

August 5, 2025

West Lafayette, Indiana-based Inotiv, Inc., a medical researcher and maker of products, suffered a cyberattack in August and is now letting victims know their personally identifiable information ended up stolen.
Inotiv, Inc. (“Inotiv”) is a contract research organization that provides nonclinical and analytical drug discovery and development services and research models and related products and services.
“On August 5, 2025, we detected unusual activity on certain Inotiv systems and promptly initiated an investigation,” the company said in a notice to victims of the attack. “On August 8, 2025, we determined that this unusual activity was due to unauthorized actions by a threat actor.”

November 1, 2025

Fremont, California-based medical instrumentation maker, Cytek Biosciences, Inc., suffered a cyberattack in November which resulted in threat actors stealing personally identifiable information in the hack.
“Cytek Biosciences experienced a data security incident involving unauthorized access to certain of our systems that occurred on or around November 1, 2025,” the company said in a letter to victims. “Based on our investigation, we learned on or around November 28, 2025, that, in connection with this issue, an unauthorized party obtained certain of your personal information.”
The information varied by affected individual and may have included, to the extent provided to Cytek, name, contact information (e.g., postal address, email address, and phone number), date of birth, Social Security number, driver’s license number, government-issued ID number, citizenship status, signature, health and medical information, financial account and compensation information, as well as Cytek employee account username and password.

August 5, 2025

West Lafayette, Indiana-based medical supplier Inotiv, Inc. suffered a cyberattack in August where personally identifiable information ended up stolen.
“On August 5, 2025, we detected unusual activity on certain Inotiv systems and promptly initiated an investigation,” the company said in a letter to victims of the attack. “On August 8, 2025, we determined that this unusual activity was due to unauthorized actions by a threat actor. Our investigation determined that between approximately August 5-8, 2025, a threat actor gained unauthorized access to Inotiv’s systems and may have acquired certain data.”

April 12, 2025

Dialysis service provider, DaVita, reported on April 14, 2025 that it discovered a ransomware attack encrypting part of its network. DaVita became aware of the incident on April 12, 2025 and immediately implemented response protocols to isolate the impacted systems. Despite the attack impacting some operations, patient care continues. DaVita reported it “cannot estimate the duration or extent of disruption at this time,” in its SEC regulatory filing.

The Interlock ransomware gang has claimed the cyberattack and leaked data allegedly stolen from the organization. According to the gang’s claim, they have around 1.5 terabytes of data or nearly 700,000 files of what appear to be sensitive patient records, information on user accounts, insurance, and even financial details.

DaVita is a Fortune 500 kidney care provider with more than 2,600 U.S. dialysis centers, 76,000 employees in 12 countries, and an annual revenue exceeding $12.8 billion.

May 8, 2024

Ascension, one of the largest hospital networks in the USA, suffered a BlackBasta ransomware attack. The hackers encrypted digital systems throughout the 19-state health system operations, leading hospitals to disconnect their networks and revert to manual operations and work-arounds.