Data Breaches

Pharmaceutical Company Inotiv Confirms Ransomware Attack

Inotiv has notified the SEC that its business operations took a hit after hackers compromised and encrypted its internal systems.

Inotiv ransomware

Pharmaceutical company Inotiv has notified the US Securities and Exchange Commission (SEC) that its business operations took a hit after hackers compromised and encrypted its internal systems.

The incident, the organization said in a Form 8-K filing, occurred on August 8, and prompted Inotiv to initiate containment and remediation processes.

“The company’s preliminary investigation determined that a threat actor gained unauthorized access to, and encrypted certain of, the company’s systems,” Inotiv says.

“The cybersecurity incident has caused, and is expected to continue to cause, disruptions to certain business operations of the company,” it continues.

According to Inotiv, the ransomware attack prevented it from accessing certain networks and systems, including parts of its internal data storage and internal business applications.

To reduce impact from the incident while working on restoring the affected systems, Inotiv transitioned some of its operations to offline alternatives.

Advertisement. Scroll to continue reading.

“While the company is working diligently to restore affected functions and systems access, the timeline for a full restoration is not yet known,” Inotiv told the SEC.

While the pharmaceutical firm has not shared details on the threat actor responsible for the attack, the Qilin ransomware group claimed the incident on August 11, when it added Inotiv to its Tor-based leak site.

Qilin says it stole roughly 176 gigabytes of data from Inotiv, representing agreements, internal procedures, financial documents, purchase orders, and other business documents.

SecurityWeek has emailed Inotiv for a statement on the matter and will update this article if the company responds.

Based in Indiana, Inotiv is a contract research organization focused on new drugs and medical devices. It has roughly 2,000 employees.

Related: Gambling Tech Firm Bragg Discloses Cyberattack

Related: US Seizes $2.8 Million From Zeppelin Ransomware Operator

Related: Manpower Says Data Breach Stemming From Ransomware Attack Impacts 140,000

Related: Anticipating the Cyber Frontier: Top Predictions for 2025

Related Content

Data Breaches

A hacker claims to have stolen 7.5 million customer records after breaching the company’s systems.

Data Breaches

Hackers exploited a vulnerability in a VPN product to steal the personal information of roughly 240,000 people.

Data Breaches

The company unintentionally disclosed users’ information to a third party impersonating a government agency.

Data Breaches

Stolen credentials were used in a multi-month campaign to access subscriber personal data and billing records.

Data Breaches

Hackers compromised the Brevo marketing platform and used that access to send phishing emails to users of Trezor, BitBox, and CoinTracking.

Cybercrime

Oleksii Oleksiyovych Lytvynenko has been sentenced to 4 years in prison after he was arrested in Ireland in 2023.

Data Breaches

A misconfigured test server containing engineering material, including internal configurations, was accessed by threat actors.

Data Breaches

In June 2026, hackers stole personal, health, and insurance information from AdaptHealth’s systems.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version