OraSure Technologies reports exfiltrated files and reaffirms quarterly revenue guidance

OraSure Technologies, which makes diagnostic and sample-collection products, disclosed on April 12, 2024 that it had become aware on or about March 27 that an unauthorized third party had accessed company data. The filing combined the Item 1.05 disclosure with a reaffirmation of first-quarter revenue guidance.

Disclosure

OraSure said it had contained the incident and preserved its core financial and operational systems. It confirmed files had been exfiltrated but was still working out whether they held sensitive or personal information.

Unusually for an Item 1.05 filing, OraSure stated that it did not expect a material effect going forward. Under Item 7.01 in the same filing it repeated its earlier revenue guidance for the first quarter.

Remaining questions

The filing leaves open what the files contained and how many people, if any, would need notice, and there is no amendment in the log. It also does not explain why a 16-day gap separated awareness from filing.