Skip to content
Leak-site post naming Crystal Pharmatech, captured by ThreatCluster
Back to victims

Crystal Pharmatech

qilin

Ransomware leak-site victim intelligence · EN

Views
2,244
Posted
Aug 6, 2026
Country
US
Industry
Accounting Services

Summary

Written by ThreatClusterfrom victim profile, leak post, screenshot

Crystal Pharmatech, an accounting services firm, is named as the victim by the qilin ransomware group. The leak post provides no detail on what data was taken or how much. The leak page is listed, with the group described as "Accounting Services."

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
http://www.crystalpharmatech.com

What was taken

Accounting Services

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Screenshot of a spreadsheet containing columns for temperature, activity coefficients, mass fractions, and volume fractions, with some cells highlighted in yellow.
onion leak page546 KB
Document titled "GLP Batch preparation of SPR1-TE-0326" with sections for proposal details, client information, and signatures. It includes a confidentiality notice.
onion leak page407 KB
Screenshot of a spreadsheet containing data on various solvents, including properties like pKa, safety class, and solubility values.
onion leak page578 KB
Screenshot of a spreadsheet containing chemical compounds with columns for compound name, pKa, molecular weight (Mw), and other related data.
onion leak page393 KB
Document titled "Packing List" with sections for consignee and sender information, shipment details, and sample information, including sample description and packaging details.
onion leak page323 KB
Flowchart outlining the process for polymorph discovery, including steps like sample characterization, method selection, and various decision points.
onion leak page353 KB
Document containing data on the solubility and characterization of HCJ salt, including tables and chemical properties.
onion leak page511 KB
Table displaying multiple rows and columns with headers labeled "DO," "NOT," "USE," "THIS," "ROW," "IS," "NO," and "GOOD," along with various alphanumeric codes.
onion leak page490 KB
Logo of Crystal Pharmatech featuring stylized blue geometric shapes and the company name in both English and Chinese.
onion leak page19 KB
Screenshot of an Excel spreadsheet with columns including Frequency, Activity Conditions, and various numerical values highlighted in yellow.
onion leak page104 KB

Negotiation
Tox 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
Onion http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion