Mint Pharmaceuticals listed on 8base leak site

• Ransomware group: 8base
• Country: Canada
• Sector: Healthcare
• Announcement date: December 25, 2024

8base claims to have targeted Mint Pharmaceuticals

The threat group known as 8base has listed the Canadian-based organization Mint Pharmaceuticals on its dedicated leak site. According to the announcement, the group claims to have successfully obtained the company's data. This listing marks a significant development in the ongoing activities of the threat actor, which has been observed attempting to maintain its operations following infrastructure disruptions earlier in 2025.

The claim follows a period of alleged unauthorized access. The threat actor alleges that the initial compromise or data acquisition occurred on November 30, 2024. The public announcement regarding this incident was made on December 25, 2024. In a display of typical ransomware group tactics, the group has initiated a countdown for the publication of the data, a method frequently used to increase pressure on the victim organization.

Details of the alleged data theft

While the threat actor claims to have successfully exfiltrated confidential files belonging to the organization, the group has been non-specific regarding the exact nature of the stolen information. At this stage, no specific details regarding the types or the scope of the data have been provided by the attackers. Furthermore, there is no information available regarding the total size of the data, the specific file count, or the amount of the ransom demand being sought by the group.

The use of a countdown timer is a hallmark of the double-extortion strategy. In such scenarios, threat actors do not merely encrypt an organization's systems to disrupt operations; they also steal sensitive information to use as leverage. By threatening to release the data publicly if a ransom is not paid, the attackers aim to create a secondary layer of pressure, moving the threat from a purely operational disruption to a significant reputational and legal crisis.

About Mint Pharmaceuticals

Mint Pharmaceuticals is a company based in Canada that has been operating since 2007. As a generic pharmaceutical company, it plays a role in the Canadian healthcare market by providing high-quality generic drugs and various healthcare solutions. The company's mission focuses on providing affordable pharmaceutical options to its customer base.

Risk assessment and industry implications

This leak claim poses a potential risk of exposing the organization's operational data and sensitive information. Because Mint Pharmaceuticals is a healthcare entity operating within Canada, a confirmed data breach could trigger complex legal processes under the Personal Information Protection and Electronic Documents Act (PIPEDA) regulations. Such regulations are designed to protect consumer privacy and govern how organizations handle sensitive personal data.

The double-extortion method employed by 8base can lead to several secondary risks for the organization and its stakeholders. Beyond the immediate pressure to pay a ransom, the exposure of sensitive data can lead to identity theft or the launch of highly targeted phishing attacks against employees or clients. Such attacks often use the stolen information to gain further access to the network or to defraud individuals.

For organizations operating within the healthcare sector, maintaining robust cybersecurity postures is critical. Common defensive steps to mitigate these risks include implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular offline backups. Furthermore, organizations should focus on data encryption both at rest and in transit to ensure that even if data is exfiltrated, it remains unreadable to unauthorized parties. Continuous monitoring and incident response planning are also essential to detect and react to unauthorized access attempts before data can be exfiltrated.