Cyberattack at Pharma Product Maker, Chiesi USA

December 30, 2025

INCIDENT

Cary, North Carolina-based Chiesi USA, Inc., a pharmaceutical manufacturing and researcher, suffered a cyberattack in August where personally identifiable information ended up stolen in the hack.
“On August 28, 2025, we learned of potential unauthorized access to our U.S.-based systems,” the company said in a letter to victims of the attack. “We launched our investigation in partnership with third-party cybersecurity specialists to determine the nature and scope of the incident and activated our remediation and recovery efforts.”
After the investigation wrapped up, Chiesi determined an unauthorized third party accessed certain information maintained on its U.S.-based systems. Additionally, the company said this access was the result of an IT security issue that impacted part of its internal IT infrastructure.

Incident Date

August 28, 2025

Estimated Cost

Unknown at this time

Type of Malware

No Malware identified

Threat Source

No threat source identified