Amphastar Pharmaceuticals, Inc.

The personal information of employees of Amphastar Pharmaceuticals was stolen by DoppelPaymer ransomware attackers.

The attackers uploaded a number of files from the stolen data as proof of access on the dark web.

Source: https://www.databreaches.net/amphastar-pharmaceuticals-discovers-that-threat-actors-had-exfiltrated-employee-data-in-may-ransomware-attack/

TPRM report: https://scoringcyber.rankiteo.com/company/amphastar-pharmaceuticals-inc.

"id": "amp12309222",
"linkid": "amphastar-pharmaceuticals-inc.",
"type": "Ransomware",
"date": "05/2020",
"severity": "75",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Pharmaceuticals',
                        'name': 'Amphastar Pharmaceuticals',
                        'type': 'Company'}],
 'data_breach': {'data_exfiltration': True,
                 'personally_identifiable_information': True,
                 'type_of_data_compromised': 'Personal Information'},
 'description': 'The personal information of employees of Amphastar '
                'Pharmaceuticals was stolen by DoppelPaymer ransomware '
                'attackers. The attackers uploaded a number of files from the '
                'stolen data as proof of access on the dark web.',
 'impact': {'data_compromised': 'Personal Information of Employees'},
 'initial_access_broker': {'data_sold_on_dark_web': True},
 'motivation': 'Data Theft',
 'ransomware': {'data_exfiltration': True, 'ransomware_strain': 'DoppelPaymer'},
 'threat_actor': 'DoppelPaymer',
 'title': 'DoppelPaymer Ransomware Attack on Amphastar Pharmaceuticals',
 'type': 'Ransomware'}