The Skira Team ransomware group claims to have breached Innovex Holdings Co., Ltd., a Thailand-based company specializing in medical equipment and services management. The group alleges that they have encrypted and stolen data from Innovex and its entire network of subsidiaries. While Innovex is the primary target, the attackers explicitly state that the compromise extends to the following associated entities:
-
CMC Biotech Co., Ltd.: A biotechnology and medical supply subsidiary.
-
Thai GL Co., Ltd.: Associated with medical services.
-
Thai Industech Co., Ltd.: An industrial technology arm of the group.
-
Abex Technologies Co., Ltd.: A technology services provider.
-
Healthcare Enterprises Co., Ltd.: A healthcare services subsidiary.
According to the Skira Team, they have exfiltrated over 30TB of data and compromised the organization’s entire server infrastructure, including more than 100 VMware virtual machines. The allegedly compromised data includes:
-
Fingerprint databases
-
Customer databases (specifically noted by the actors as containing patient data)
-
Employee databases
-
Complete server infrastructure data (Windows, CentOS, Ubuntu, App servers)
