Skip to content
Leak-site post naming Ethypharm, captured by ThreatCluster

Ethypharm

underground

Ransomware leak-site victim intelligence

Posted
Jul 1, 2024
Country
France
Industry
Pharmaceuticals

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post

The leak published by the group underground claims Ethypharm, a France-based pharmaceutical company, had a broad set of internal documents and records taken, including confidential and personnel data, contracts, invoices, and project reports. The leak post is published, with locations cited as France, England, Germany, Italy, Spain, and China. The group states Ethypharm is the victim.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Employees
0
Platforms
SQL Databases Oracle Databases

What was taken

Ethypharm is a specialty pharmaceutical company with prominent products in targeted Central Nervous System (CNS) indications, notably severe pain, and opioid dependency as well as a wide range of high-quality injectable medicines for hospitals and emergency situations.

Data categories
Confidential docsRecruitment docsPartners infoMonthly case reviewsSales dataDistributors infoPersonal files of employeesCertificatesWork instructionsAgreementsInvoicesAccidentsInvestigationsLegal claimsProject reportsProject finance documentsFinance documentsAudit Reports (STRICTLY PRIVATE and CONFIDENTIAL)Development reports and protocolsClinical trials and dataCourt docsSafety data exchange agreementsLaboratories dataChildren's names and dobBusiness PlansSQL DatabasesOracle Databases

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Locations
France, England, Germany, Italy, Spain, China

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture