A major pharmaceutical company based in Gujarat has reportedly been targeted in a cyberattack, with perpetrators demanding a ransom of ₹30 crore to restore access to compromised systems. The breach allegedly compromised critical information stored within the firm’s core medicine module, sparking concerns over the vulnerability of essential digital infrastructure in the pharmaceutical sector. Authorities from the Gujarat State Cyber Crime Cell and technical experts have launched an investigation into the intrusion, examining both the extent of the compromised records and unverified claims of a cryptocurrency payout.
Breach Compromises Core Pharmaceutical Data
Preliminary findings indicate that the attackers gained unauthorized entry into the company’s internal network, zeroing in on sensitive pharmaceutical records. The intrusion reportedly hit the company’s medicine module, an operational component responsible for handling vital product and formulation data. Such unauthorized access presents substantial risks to day-to-day operations, potentially exposing proprietary formulations and internal commercial records to unauthorized third parties.
Following the intrusion, company personnel encountered severe barriers when attempting to access internal files. The attackers reportedly demanded ₹30 crore in exchange for decrypting or handing back control of the seized databases. Official sources have yet to confirm the full scale of the technical disruption, leaving it unclear whether the files were encrypted by ransomware, exfiltrated for extortion, or marked for permanent deletion. The total volume of compromised records and the exact number of infected terminals also remain under technical review.
Investigators Probe Alleged Cryptocurrency Ransom Transfer
The case took a more intricate turn following reports that the firm may have transferred the demanded funds through a cryptocurrency wallet. Cybercriminals routinely favor digital assets to transfer extortion money across borders, relying on pseudo-anonymous addresses to obscure the identity of the beneficiaries. Law enforcement officials have noted that while crypto networks introduce jurisdictional challenges, public ledgers still yield transactional breadcrumbs that forensic analysts can trace with cooperation from relevant exchanges and service platforms.
The inquiry gained momentum after an initial complaint was lodged at a police station in western Ahmedabad. Specialized teams are working to ascertain whether any financial transaction actually occurred, as no official confirmation has verified the payment of the ₹30 crore sum. Analysts are cross-referencing available digital ledgers, wallet identifiers, and timestamped network logs to verify whether funds left the company’s possession. Until technical traces establish a definitive outflow, the reported financial exchange remains an unverified claim.
Technical Analysis Focuses on Network Entry Points
Cybersecurity specialists are currently conducting a forensic audit of the enterprise architecture to identify the initial vector of compromise. Investigators are reviewing firewall logs, authentication records, and access permissions to determine whether weak credentials, unpatched vulnerabilities, or phishing mechanisms allowed the intrusion. The technical assessment will clarify whether the incident stemmed purely from data theft or involved extensive malware deployment designed to cripple internal operations.
The identity of the perpetrators has not been formally verified. While early suspicions pointed toward hacking groups operating out of China, investigative agencies have stressed that no conclusive technical attribution exists at this stage. Neither the identity of the affected pharmaceutical enterprise nor the precise date of the breach has been publicly disclosed. Authorities are continuing their technical appraisal to evaluate the security lapses that allowed the breach and to establish whether any secondary company systems remain exposed.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
