The aurora extortion crew has listed Laboratorios Roemmers, Argentina’s largest drugmaker by revenue, on its leak site, claiming a haul that mixes pharmaceutical intellectual property with sensitive employee health data.
Roemmers reports consolidated turnover of about EUR 1.669 billion, with 6,890 employees and 69 subsidiaries across 11 countries. According to the group’s post, the stolen material includes 82 GB of drug formulations, which the crew described as the company’s complete product portfolio, from active ingredient synthesis methods to finished-form specifications.
The listing also claims 4,207 employee national identity numbers (CUIL, Argentina’s equivalent of a Social Security number) paired with dates of birth and health insurance affiliations, plus dispensing records for psychiatric medications such as clonazepam, alprazolam and diazepam, and pre-employment medical exam results. It further cites supplier qualification dossiers and internal pricing strategy.
None of the claim has been verified, and no ransom deadline was published. If accurate, the exposure cuts two ways that matter to the sector: proprietary formulation data is the core competitive asset of a drugmaker, and workforce mental health records carry heightened legal and privacy sensitivity.
For pharma and biotech security leaders, the case underscores that manufacturing know-how and clinical-grade employee data need the same protection as trial results, and that supplier dossiers can map a supply chain for the next attacker.
