PharmaEssentia Reports Cyberattack; Says Encrypted Confidential Data Was Not Leaked
Summary
PharmaEssentia says it and subsidiary Panion & BF Biotech suffered a cyberattack on August 3. It is investigating with outside experts and says there is no major business impact; an attacker claims data was exposed.
Key points
- The company says some information systems at PharmaEssentia and its subsidiary were attacked on August 3.
- PharmaEssentia says confidential information was encrypted and not leaked; it currently assesses that operations have not been significantly affected.
- An attacker reportedly claimed to have obtained employee names and email addresses and threatened to provide access to internal information; this claim is not independently confirmed in the article.
- The company activated its security response, engaged external cybersecurity experts, and is assessing the scope of impact.
- PharmaEssentia says it reported the incident to relevant authorities and disclosed it through Taiwan's public information system.
- The company warns recipients not to click suspicious links or attachments and to check sender addresses. Its stated email domain is pharmaessentia[.]com.
Article Details
- Victim Organization
- PharmaEssentia (藥華藥) and its subsidiary 泛泰醫療
- Victim Domain
- pharmaessentia.com
- Incident Type
- Cyberattack on information systems; attackers allegedly claimed data leakage and threatened to make internal information searchable.
- Data Types Exposed
- Employee names
- Employee email addresses
- Operational Impact
- The company reported no significant operational impact and said its initial assessment found no harm or loss. It stated that confidential information was encrypted and had not been leaked.
- Ransom Or Extortion
- An unidentified party reportedly threatened to provide access to internal information within 200 hours; no ransom demand is reported.
- Claim Status
- alleged
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
| DOMAIN | pharmaessent1a[.]com | Domain identified by PharmaEssentia as an impersonation domain, not its legitimate email domain. |
| DOMAIN | pharmaessentia[.]com[.]tw | Domain identified by PharmaEssentia as an impersonation domain, not its legitimate email domain. |
| DOMAIN | pharmaessentiacorp[.]com | Domain identified by PharmaEssentia as an impersonation domain, not its legitimate email domain. |