Zdrowit Confirms Cyberattack Involving Unauthorized Access and Encrypted Systems
Summary
Zdrowit S.A. confirmed unauthorized access to its IT systems and encryption of some resources. A ransomware group later published a file allegedly linked to the company, but its origin and whether data leaked remain unverified.
Key points
- Zdrowit S.A. confirmed unauthorized access to its IT systems and encryption of part of its resources.
- The company said security procedures and safeguards stopped the unauthorized activity and that specialists are securing and investigating its IT environment.
- Zdrowit said its pharmacies and their dedicated software were outside the incident’s scope, with no impact on pharmacy operations.
- A ransomware group listed Zdrowit among its victims in early September and later published a file it claimed came from the company.
- The file’s origin could not be verified; its publication alone does not establish that Zdrowit data was leaked.
Article Details
- Victim Organization
- Zdrowit S.A.
- Incident Type
- Unauthorized access to IT systems and encryption of some resources; the incident was listed by a ransomware group.
- Affected Data Size
- A file larger than 90 GB was published by the ransomware group and allegedly came from Zdrowit S.A.; its origin was not verified.
- Operational Impact
- Some resources were encrypted. The company said its security procedures and safeguards stopped the unauthorized activity. It stated the incident did not affect the separate Apteki Zdrowit pharmacies or their systems.
- Ransom Or Extortion
- A ransomware group listed Zdrowit as a victim and, after its countdown ended, published a file allegedly originating from the company. The article could not verify the file's origin and notes that its publication does not establish a data leak. No ransom demand or payment is reported.
- Claim Status
- confirmed