Skip to content
Leak-site post naming MPA Pharma GmbH, captured by ThreatCluster

MPA Pharma GmbH

metaencryptor

Ransomware leak-site victim intelligence

Data size
14 TB
Files
3
Posted
Aug 23, 2026
Countdown
13d Deadline
Country
Germany
Industry
pharmaceuticals

Summary

Written by ThreatClusterfrom victim profile, leak post

The group claims it exfiltrated 14 TB of data from MPA Pharma GmbH, described on the leak page as an internationally active German pharmaceutical importer/trader with over 35 years of experience and contract manufacturing services (domain mpapharma.com). Publication status on the leak site is listed. Victim profile lists MPA Pharma GmbH with domain mpapharma.com and country Germany.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Employees
500

What was taken

MPA Pharma GmbH is an internationally active, rapidly growing company specializing in the import and trade of high-quality pharmaceuticals, including both patented and generic products. With over 35 years of expertise in the pharmaceutical market, they also provide contract manufacturing services for third parties. Their primary clients include pharmacies and businesses in need of reliable pharmaceutical and medical products.

Sample files (3)
FILESLISTS
FULLDATA
SAMPLES

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Video
MPA Pharma and EMRAmed Corporate Video - Download: MPA Pharma and EMRAmed Corporate Video (files/media/emramed/download-seite/EMRAMED_Imagefilm_ENG_EMRAMED_Logo_HQ.mp4)

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture