Skip to main content

ARTIVION, INC.

For the period ended Sep 30, 2026. Filed Nov 6, 2026.

View on SEC.gov

About this filing

A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.

Sep 30, 2026 · Filed Nov 6, 2026

AORT$20.21-20.2%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-Q

Period ended 2026-06-30; filed 2026-08-07.

0001628280-26-054746

Item 1A. Risk Factors

Current report: 10-Q

Period ended 2026-09-30; filed 2026-11-06.

0001628280-26-071486

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 183 previous paragraphs and 183 current paragraphs.

179 unchanged; 4 reworded; 0 added; 0 removed; 0 previous and 0 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Reworded paragraphs (4)

Previous wording

•BioGlue is a mature product and other companies may use the inventions disclosed in expired BioGlue patents to develop and make competing products.

Current wording

•BioGlue is a mature product and other companies may use the inventions disclosed in expired BioGlue patents to develop and make competing products, which they may be able to sell at lower prices.

Previous wording

We have experienced, and expect to continue to be subject to the risk of, cybersecurity threats and incidents. For example, we experienced a previously-disclosed cybersecurity incident in the fourth quarter of 2024 that temporarily disrupted our business operations, including our ERP systems, and had an impact on revenue, manufacturing, order processing, shipping, and other corporate operations. We continue to incur expenses in connection with improving our global infrastructure and cybersecurity posture. Additionally, we remain subject to other risks and uncertainties as a result of the incident, including those related to scrap, inventory levels, and timely shipping releases, as well as the potential to incur additional expenses.

Current wording

Like other medical device companies, we have experienced, and expect to continue to be subject to the risk of, cybersecurity threats and incidents. For example, we experienced a previously-disclosed cybersecurity incident in the fourth quarter of 2024 that temporarily disrupted our business operations, including our ERP systems, and had an impact on revenue, manufacturing, order processing, shipping, and other corporate operations. We continue to incur expenses in connection with improving our global infrastructure and cybersecurity posture. Additionally, we remain subject to other risks and uncertainties as a result of the incident, including those related to scrap, inventory levels, and timely shipping releases, as well as the potential to incur additional expenses.

Previous wording

Some of our products, including certain On-X products, are sterilized using ethylene oxide (“EtO”), primarily by third-party, large-scale EtO facilities. In addition, some of our suppliers use, or rely upon third parties to use, EtO to sterilize some of our product components. Concerns about the release of EtO into the environment at unsafe levels have led to increased activism and lobbying as well as various regulatory enforcement activities against EtO facilities, including closures and temporary closures, lawsuits against EtO service providers, and proposals increasing regulations related to EtO. The number of EtO facilities in the US is limited, and any permanent or temporary closures or disruption to their operations for any reason could delay, impede, or prevent our ability to commercialize our products.

Current wording

Some of our products, including certain On-X products, are sterilized using ethylene oxide (“EtO”), primarily by third-party, large-scale EtO facilities. In addition, some of our suppliers use, or rely upon third parties that use, EtO to sterilize some of our product components. Concerns about the release of EtO into the environment at unsafe levels have led to increased activism and lobbying as well as various regulatory enforcement activities against EtO facilities, including closures and temporary closures, lawsuits against EtO service providers, and proposals increasing regulations related to EtO. The number of EtO facilities in the US is limited, and any permanent or temporary closures or disruption to their operations for any reason could delay, impede, or prevent our ability to commercialize our products.

Previous wording

We are subject to an increasing number of federal, state, and foreign laws and regulations to address topics relating to data privacy, sustainability, and artificial intelligence. These regulations, some of which can be enforced by private parties or governmental entities, have been or are being promulgated and are constantly evolving and becoming increasingly complex and rigorous. These laws and regulations may include new compliance or disclosure requirements which increase our operating costs and require significant management investment. Many of these laws and regulations, including, but not limited to, the European Union’s General Data Protection Regulation (“GDPR”) also include significant penalties for noncompliance. Although our practices, policies, and procedures are intended to comply with relevant laws and regulations, there can be no assurance that regulatory or enforcement authorities will view our arrangements as being in compliance, or that one or more of our employees or agents will not disregard aspects of our compliance programs. Any resulting government enforcement activities may be costly, result in negative publicity, or subject us to significant penalties.

Current wording

We are subject to an increasing number of federal, state, and foreign laws and regulations to address topics relating to data privacy, cybersecurity, sustainability, and artificial intelligence. These regulations, some of which can be enforced by private parties or governmental entities, have been or are being promulgated and are constantly evolving and becoming increasingly complex and rigorous. These laws and regulations may include new compliance or disclosure requirements that increase our operating costs and require significant management investment. Many of these laws and regulations, including, but not limited to, the European Union’s General Data Protection Regulation (“GDPR”) and the Network and Information Security Directive 2 (“NIS2”) also include significant penalties for noncompliance. Although our practices, policies, and procedures are intended to comply with relevant laws and regulations, there can be no assurance that regulatory or enforcement authorities will view our arrangements as being in compliance, or that one or more of our employees or agents will not disregard aspects of our compliance programs. Any resulting government enforcement activities may be costly, result in negative publicity, or subject us to significant penalties.