The INC Ransomware group claims to have breached Nang Kuang Pharmaceutical Co., Ltd., a prominent Taiwanese pharmaceutical manufacturer with a reported revenue of $70 million. The threat actor alleges they have exfiltrated 430GB of sensitive corporate, clinical, and partner data, and they have threatened a full publication of the stolen files within four weeks if their demands are not met.
According to the actor, the allegedly compromised data is classified as confidential and secret, including:
-
Information regarding clients and partners worldwide, including Rosetta, PeptiStar Inc, Shiratori Pharmaceutical Co Ltd, Apexcela co. ltd, Somerset Pharma LLC., CureLeads FZ-LLC., and Pfizer
-
Project data for medical drugs such as Eroxon, Cinacalcet, Icatibant, Exparel, and bupivacaine
-
Corporate agreements, ongoing projects, and lawsuits involving Pfizer
-
Comprehensive clinical reports ranging from inception to late-phase trials
-
Personal information, including scanned identification documents (ID scans)
-
Internal email communications
-
Confidentiality and Non-Disclosure Agreements (CDAs and NDAs)
-
Clinical Reviews and Product Risk Assessments
-
Regulatory and manufacturing documentation, including RGD, RDO, DMF, GMP, and CRF files
