Lapsus$ Claims AstraZeneca Data Exfiltration in Unverified Listing
Summary
A monitoring post attributes an unverified claim to lapsus$ that AstraZeneca data—including source code, employee records, API keys, and database credentials—was exfiltrated.
Key points
- The record names ASTRAZENECA CORP as the alleged victim and lapsus$ as the actor.
- The claim alleges exfiltration of source code, an employee database, API keys, and MongoDB/MySQL credentials.
- The post says it is monitored by ransomware[.]live; its Source field is blank.
- The author says the group’s claims cannot be confirmed and invites an official statement.
Article Details
- Victim
- ASTRAZENECA CORP
- Claim Date
- 2026-03-25
- Encryption Status
- Unknown
- Exfiltration Status
- Claimed by lapsus$; unverified by the source.
- Exfiltrated Data
- Source code, an employee database, API keys, and MongoDB/MySQL credentials, according to the claim.
- Ransom Demand
- Unknown
- Leak Status
- Unknown; the source reports a group claim but does not confirm publication or authenticity of leaked data.
Threat Actors
Products
MongoDBRansomware claims against ASTRAZENECA CORP in GB by lapsus$ allege exfiltration of source code, an employee database, API keys, and MongoDB/MySQL credentials.MySQLRansomware claims against ASTRAZENECA CORP in GB by lapsus$ allege exfiltration of source code, an employee database, API keys, and MongoDB/MySQL credentials.