A threat actor claims to have breached Hamdard Pakistan, a prominent company specializing in Unani (herbal) medicines based in Karachi. Founded in 1948, the company is a well-known name in the country’s healthcare and wellness sector.
According to the actor’s post on a dark web forum, the breach occurred on September 24, 2025, resulting in the exfiltration of a database containing 6,000 records, seemingly related to job applications.
The allegedly compromised data includes a wide range of personally identifiable information (PII). According to the actor, the dataset contains:
- Full names
- Marital status
- Dates of birth
- Email addresses
- Mobile and phone numbers
- Physical addresses (city, country)
- Job application messages
- CV files
- Job titles and departments
