A newer extortion crew has named a Hong Kong biotechnology company, extending a run of attacks that puts drug developers and life-sciences suppliers in the crosshairs.
NightSpire listed Great Bay Bio on its leak site on September 20 and threatened to expose data unless a settlement is reached, according to the DeXpose threat tracker and ransomware.live. The listing carried no sample files or data volume, and the crew’s own statement read only that data was “not available now,” leaving the claim unverified.
The victim sits in the contract research and biologics space, a segment that holds cell-line development records, formulation data and often early-stage intellectual property. Even an unconfirmed claim carries cost, because study partners and investors want to know what a supplier holds the moment a listing appears.
NightSpire is building a broad victim list across law firms, manufacturers and police departments as well as healthcare and life sciences, with several hundred entries indexed by ransomware.live. Its health-adjacent entries include personal care and medical supply companies alongside the biotech listing.
For pharma and biotech security leads the to-do list is familiar but easy to defer. Map where research data actually lives, including at smaller Asia-based partners that may not carry the same controls as the parent organization, and give legal counsel a pre-agreed position on what the company will and will not say if a leak site names it.
