Qilin, the extortion group behind a string of healthcare attacks, has listed Cyprus drug manufacturer Medochemie on its leak site, claiming access to internal data.
Ransomware.live logged the listing on August 19 at 11:01 UTC, estimating the attack date as the same day. RansomLook carried the claim within hours, and GalaxyWarden rated it high severity while marking it unconfirmed. Medochemie has not publicly acknowledged a breach, and no stolen files have been published.
Medochemie is one of the Mediterranean region’s larger generics producers, running 15 manufacturing sites and holding roughly 5,145 marketing authorizations across about 500 product combinations, with some 2,000 employees worldwide. Its output accounts for a meaningful share of Cyprus industrial exports.
The company’s role as a contract manufacturer means a compromise could carry supply-chain implications beyond its own operations, since finished dosage forms and intermediates move to distributors and health systems across Europe, Africa, and the Middle East.
Qilin has repeatedly targeted drugmakers and care providers, including a claim against Crystal Pharmatech earlier this month. Pharmaceutical firms should treat this listing as a prompt to review third-party access, batch records, and any systems touching regulatory submissions.
