Pharmaceutical

Industry

No Details Disclosed after Cyberattack at Pharmascience, Canada

June 1, 2024

Largest Canadian-owned pharmaceutical company, Pharmascience, was the target of a cyberattack. The company confirmed that it had discovered an intrusion into its computer system on June 1 , but refused to provide details on the extent and duration of the attack.

The Montreal-based generic drug manufacturer – which offers more than 1,400 products – declined to confirm whether a ransom was demanded or paid, or whether data was stolen.

The company says it responded quickly by hiring cybersecurity experts, which helped “secure” its computer systems. “We have since resumed operations safely and effectively,” the email sent to us reads.

read more

French Pharmacy Wholesaler hit by Cyberattack

October 19, 2024

The cyberattack at CERP began on Saturday, October 19. It targeted “information” systems. The company buys medicines from manufacturers to resell them to pharmacies. As of Saturday morning, pharmacies were asked to postpone their medication orders until Monday. According to the Brittany Regional Health Agency, they have been able to place orders online again since yesterday evening. Orange Cyber ​​Defense teams worked all weekend to counter the cyberattack.

read more

Canadian London Drugs Refused to Pay $25M Ransom

April 28, 2024

The ransomware attack on London Drugs paralyzed operations across 79 stores in Western Canada for over a week, and further disrupted services in the other Canadian provinces. On May 7 all stores had fully reopened. London Drugs improvised so about half of its chain could provide pharmacy services to ensure existing prescriptions wouldn’t be interrupted.

The breach resulted in the theft of sensitive corporate files, including extensive employee records like immigration applications, termination letters, and personal data such as financial information and medical records.

read more

Data Leak at Alexion Pharmaceuticals after Vendor’s Systems Compromised

May 14, 2024

On May 14, 2024, Alexion Pharmaceuticals (“Alexion”) filed a notice of data breach with the Attorney General of Vermont after discovering that a vendor used by the company experienced a data security incident.

In this notice, Cisiv explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their name, address, email address, and phone number, as well as information regarding surveys taken regarding Alexion’s products.

read more

Cyberattack Shuts Down Distribution at Israeli Pharma Company Rekah

June 17, 2024

Israeli pharmaceutical company, Rekah, shut down its distribution system in response to a cyberattack. The company is preparing to restore the distribution system as quickly as possible while testing manual alternatives to operate the computerized system.

Preliminary estimates suggest the extent of the damage is not substantial, according to Rekah. “Pharmacies usually have a reasonable stock. We don’t deliver every day. If there is no supply for a day or two, it won’t harm the company or the customers.”

read more

Ransomware Attack Threatens Disrupting Medicine Supply to Pharmacies in Germany

October 28, 2024

AEP, a German pharmaceutical wholesaler based in Bavaria, said it was hit by a ransomware attack. Pharmacies are currently only being supplied to a limited extent by AEP.. The Bavarian Pharmacists Association said that affected pharmacies should be able to use supplies from other wholesalers to make up for the disruption, as reported by Bayerischer Rundfunk.

On October 28, AEP fell victim to a targeted cyber attack that led to partial encryption of the company’s IT systems. The company is currently not reachable by phone and can only be reached to a very limited extent by email.

read more

Plasma Donation Company Octapharma Shuts Down 180 Centers Worldwide

April 15, 2024

The disruption has impacted more than 150 plasma centers in the US, with possible effects on European factory operations.

The BlackSuit ransomware gang took credit for the attack on Wednesday, claiming to have exfiltrated business and laboratory data as well as the information of both living and deceased donors.

read more

Cyberattack at Cambrex Corporation

November 8, 2023

Cambrex is a global contract development and manufacturing organization (CDMO) that provides drug substance, drug product, and analytical services across the entire drug lifecycle.

read more

Data Security Breach at Alkem Laboratories

January 13, 2024

Alkem Laboratories, a major pharmaceutical company, acknowledged a cybersecurity incident that resulted in a fraudulent transfer of $6.2M from one of its subsidiaries. The breach involved compromising the business email IDs of some employees at the subsidiary, though the exact details of the security breach were not disclosed by Alkem.

read more

Global Pharmaceutical Co. Cencora Data Breach

February 21, 2024

Global pharmaceutical corporation Cencora discovered that intruders had stolen data from its networks. The company said in a regulatory filing that data from IT systems “had been exfiltrated” in an incident that came to light on February 21.

UPDATE: 11 drug companies that partner with Cencora have disclosed data breaches of their own. According to data breach notifications published by the California Attorney General’s office from the affected companies, the Cencora cyber incident was the catalyst.

“The company has not yet determined whether the incident is reasonably likely to materially impact the company’s financial condition or results of operations.”

read more