Inc Ransom claims data breach against Nang Kuang Pharmaceutical Co., Ltd.

• Ransomware group: Inc Ransom
• Country: Taiwan
• Sector: Healthcare
• Announcement date: February 15, 2026

Inc Ransom targets Nang Kuang Pharmaceutical Co., Ltd.

The ransomware group known as Inc Ransom has listed a significant amount of data allegedly belonging to Nang Kuang Pharmaceutical Co., Ltd. on its dedicated leak site. According to the announcement made on February 15, 2026, the group claims to have successfully exfiltrated 430 GB of data from the organization's systems. This development follows a pattern of double-extortion tactics frequently employed by modern ransomware operators.

Double-extortion is a sophisticated cyberattack strategy where threat actors not only encrypt an organization's data to disrupt operations but also steal sensitive information before the encryption occurs. The attackers then threaten to leak the stolen data on public forums or leak sites if a ransom is not paid. This method places immense pressure on victims, as the threat of public exposure of confidential information can cause irreparable damage to reputation and legal standing, regardless of whether the organization can restore its systems from backups.

Details of the alleged data theft

The Inc Ransom group announced the breach on February 15, 2026, claiming that the full dataset will be published within a four-week timeframe. To support their claims, the group has provided various document samples within the listing. These samples reportedly include documents related to the company's ongoing projects and its various business partners.

The listing claims to contain a wide array of highly sensitive and confidential information. The specific types of data mentioned in the claim include:

• Clinical reports
• ID scans
• Email data
• Non-disclosure agreements
• Product risk assessments
• Legal documents

The inclusion of such diverse data types suggests a deep penetration into the organization's internal communications and regulatory documentation. The group's claim indicates that the stolen files include confidential and secret classified clinical reports, as well as sensitive legal documents involving business partners such as Pfizer.

Implications for the organization and the sector

The alleged leak poses significant risks to the organization's intellectual property and trade secrets. For companies operating in the pharmaceutical sector, the exposure of clinical research data and information belonging to business partners could negatively impact international collaborations and the company's overall reputation. Furthermore, the leakage of personal data, such as ID scans, may expose individuals to identity theft and targeted phishing attacks.

Because Inc Ransom utilizes double-extortion tactics, the organization may face legal sanctions under various data privacy regulations due to the exposure of sensitive information. This type of incident highlights the necessity for organizations to continuously reassess their operational continuity and data security processes. To mitigate such risks, organizations in this sector often focus on strengthening their defensive postures through enhanced monitoring, strict access controls, and robust incident response plans to protect intellectual property and sensitive partner information.