Cook Medical discloses cyber incident stemming from a scam

An outside party gained access to some company systems, but the medical device maker found no evidence that sensitive or protected data was obtained and said its operations are running normally.

Medtech companies have been targeted in a string of cybersecurity incidents this year. Over the past several months, iRhythm , Stryker , Abbott , AdaptHealth , Medtronic and Intuitive have dealt with different threats. In Stryker’s case, the cyberattack caused a global network disruption that affected its electronic ordering systems and caused shipping delays.

Cook Medical, a privately held medical device maker whose products are used in vascular treatments, critical care, surgery and urology, said the employee involved in the cyber incident was deceived by a social engineering attack. The Bloomington, Indiana-based company said its information security infrastructure, reporting and response teams worked as they should.

“We identified the unauthorized access and contained it quickly on the same day it occurred,” the company said.

Cook said it was notifying customers and employees and providing guidance on how to watch for further scams.