Extortion crews posted three healthcare and life-sciences victims this week, according to leak-site monitors, and none came with samples or a verified victim count.
The group calling itself TheGentlemen claimed MedSkin Solutions Dr. Suwelack AG, a German biotechnology company based near Munster that makes collagen and skin-care products with medical-device applications. The gang says it holds quality-management and validation files, manufacturing and production records, regulatory affairs and medical device registration documents, human resources data, and executive email archives. For a regulated manufacturer, that mix maps closely to the paperwork behind product approvals.
The same crew listed Apteki Mareshki, described as Bulgaria’s largest pharmacy chain by outlet count, with hundreds of stores spread across more than 100 towns.
A third listing came from the Safepay operation, which named triniticaring.org, a Minnesota senior-services provider jointly owned by Guardian Angels Senior Services of Elk River and Cassia.
Groups like these often post first and negotiate later, using the listing itself as pressure. Operators should treat each name as a lead to verify with the vendor rather than a confirmed incident, and should check whether any of these suppliers sit in their own third-party inventory.
