Marutake Confirms Ransomware Caused Disruption; Data Leak Unconfirmed

Summary
Marutake says unauthorized external access led to a ransomware-caused outage. Some systems remain disrupted, recovery may take days, and personal-information leakage has not been confirmed; medicine supply continues through alternative methods.
Key points
- In its May 8, 2026 update, pharmaceutical wholesaler Marutake said its investigation determined that unauthorized external access caused a ransomware-related system disruption.
- Some server disruption and difficulties in certain operations continued; the company expected full recovery to take a considerable number of days.
- Marutake said personal-information leakage had not been confirmed and that its investigation with relevant authorities was ongoing.
- Medicine supply continued using alternative methods, although some operations remained difficult.
- The disruption affected a wholesaler that supplies medical institutions and pharmacies across Niigata, Tohoku, and Kanto.
Article Details
- Victim Organization
- 株式会社マルタケ
- Incident Type
- Ransomware-related system disruption following unauthorized external access; the victim said its investigation confirmed ransomware as the cause.
- Disclosure Date
- 2026-04-28
- Affected Records
- No external leakage of personal information had been confirmed as of 2026-05-08; the investigation was ongoing.
- Operational Impact
- Some server disruption remained ongoing, and some business operations were difficult to conduct normally. Medicine supply continued using alternative methods, though full restoration was expected to take considerable time.
- Ransom Or Extortion
- Not disclosed.
- Claim Status
- confirmed
