Novartis

Pharmaceutical giant Novartis was targeted in a recent cyberattack by the Industrial Spy data-extortion gang.

The hacking group began selling data allegedly stolen from Novartis on their Tor extortion marketplace for $500,000 in bitcoins.

The data being sold consists of 7.7 MB of PDF files containing information related to RNA and DNA-based drug technology and tests from Novartis and were stolen "directly from the laboratory environment of the manufacturing plant.

Source: https://www.bleepingcomputer.com/news/security/novartis-says-no-sensitive-data-was-compromised-in-cyberattack/

TPRM report: https://scoringcyber.rankiteo.com/company/novartis

"id": "nov21267722",
"linkid": "novartis",
"type": "Cyber Attack",
"date": "06/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'Pharmaceuticals',
                        'name': 'Novartis',
                        'type': 'Pharmaceutical Company'}],
 'data_breach': {'data_exfiltration': True,
                 'file_types_exposed': ['PDF'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'RNA and DNA-based drug '
                                             'technology and tests'},
 'description': 'Pharmaceutical giant Novartis was targeted in a recent '
                'cyberattack by the Industrial Spy data-extortion gang. The '
                'hacking group began selling data allegedly stolen from '
                'Novartis on their Tor extortion marketplace for $500,000 in '
                'bitcoins. The data being sold consists of 7.7 MB of PDF files '
                'containing information related to RNA and DNA-based drug '
                "technology and tests from Novartis and were stolen 'directly "
                "from the laboratory environment of the manufacturing plant.'",
 'impact': {'data_compromised': ['RNA and DNA-based drug technology and tests'],
            'systems_affected': ['laboratory environment of the manufacturing '
                                 'plant']},
 'initial_access_broker': {'data_sold_on_dark_web': True},
 'motivation': 'Financial Gain',
 'ransomware': {'data_exfiltration': True, 'ransom_demanded': '$500,000'},
 'threat_actor': 'Industrial Spy',
 'title': 'Novartis Data-Extortion Cyber Incident',
 'type': 'Data Extortion'}