Data Breaches

Pharmaceutical Company Inotiv Confirms Ransomware Attack

Inotiv has notified the SEC that its business operations took a hit after hackers compromised and encrypted its internal systems.

Ransomware

Pharmaceutical company Inotiv has notified the US Securities and Exchange Commission (SEC) that its business operations took a hit after hackers compromised and encrypted its internal systems.

The incident, the organization said in a Form 8-K filing, occurred on August 8, and prompted Inotiv to initiate containment and remediation processes.

“The company’s preliminary investigation determined that a threat actor gained unauthorized access to, and encrypted certain of, the company’s systems,” Inotiv says.

“The cybersecurity incident has caused, and is expected to continue to cause, disruptions to certain business operations of the company,” it continues.

According to Inotiv, the ransomware attack prevented it from accessing certain networks and systems, including parts of its internal data storage and internal business applications.

To reduce impact from the incident while working on restoring the affected systems, Inotiv transitioned some of its operations to offline alternatives.

Advertisement. Scroll to continue reading.

“While the company is working diligently to restore affected functions and systems access, the timeline for a full restoration is not yet known,” Inotiv told the SEC.

While the pharmaceutical firm has not shared details on the threat actor responsible for the attack, the Qilin ransomware group claimed the incident on August 11, when it added Inotiv to its Tor-based leak site.

Qilin says it stole roughly 176 gigabytes of data from Inotiv, representing agreements, internal procedures, financial documents, purchase orders, and other business documents.

SecurityWeek has emailed Inotiv for a statement on the matter and will update this article if the company responds.

Based in Indiana, Inotiv is a contract research organization focused on new drugs and medical devices. It has roughly 2,000 employees.

Related: Gambling Tech Firm Bragg Discloses Cyberattack

Related: US Seizes $2.8 Million From Zeppelin Ransomware Operator

Related: Manpower Says Data Breach Stemming From Ransomware Attack Impacts 140,000

Related: Anticipating the Cyber Frontier: Top Predictions for 2025

Related Content

Data Breaches

The data of So-net and Plala customers in Japan was exposed, along with 54,401 email account passwords and 16 bank account records.

Data Breaches

Hackers stole personal information and iRhythm account and device data from third-party-hosted business applications.

Cybercrime

Artem Stryzhak was sentenced to 70 months in prison after pleading guilty to using Nefilim ransomware in attacks.

Data Breaches

A leaked SquareML access key could have been used to access a database containing personal and health information.

Data Breaches

The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected.

Data Breaches

The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts.

Data Breaches

In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders.

Threat Intelligence

Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked incidents.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version