top of page

BIO-ISAC Releases Advisory to Biomanufacturers

Tardigrade: An APT attack on vaccine manufacturing infrastructure

WASHINGTON - Today, the Bioeconomy ​​Information Sharing and Analysis Center, or BIO-ISAC, released an advisory regarding an advanced persistent threat (APT) attack named Tardigrade.

A large biomanufacturing facility was involved in a cyberattack in Spring 2021. Through the subsequent investigation, a malware loader was identified that demonstrated a high degree of autonomy as well as metamorphic capabilities. In October 2021, further presence of this malware was noted at a second facility.

Due to the advanced characteristics and continued spread of this active threat, BIO-ISAC made the decision to expedite this threat advisory in the public interest. Analysis continues, and updates will be released on as further details are made available.

At this time, biomanufacturing sites and their partners are encouraged to assume that they are targets and take necessary steps to review their cybersecurity and response postures.


The Bioeconomy Information Sharing and Analysis Center (BIO-ISAC), is a critical resource for cyber threat detection, prevention, protection, response, recovery and resilience for the nation, addressing threats unique to the bioeconomy and enabling coordination among stakeholders to facilitate a robust and secure industry. The BIO-ISAC is a 501(c)3 nonprofit member organization (pending), formally chartered in 2021. For more information visit

For interview requests or press inquiries, please email or call ‪(540) 782-0087. For disclosures, please email or visit

BIO-ISAC - Tardigrade - Disclosure Short
Download PDF • 3.13MB

BIO-ISAC - Tardigrade - Disclosure Long
Download PDF • 5.65MB

November 23, 2021: HHS HC3 Alert, Report: 202111231300, "BIO-ISAC Tardigrade Amplify Report"


bottom of page