Morpeth Pharmacy listed on leak site by global ransomware group

• Ransomware group: global
• Country: Australia
• Sector: Healthcare
• Announcement date: June 11, 2025

Morpeth Pharmacy targeted by global ransomware group

Morpeth Pharmacy has been listed on a ransomware leak site by a threat actor known as global. The group has published a post claiming to have compromised data belonging to the organization, marking a significant potential security incident for the healthcare provider.

Details of the alleged attack

According to the announcement published on June 11, 2025, the threat actor known as global alleges that Morpeth Pharmacy was subjected to a cyberattack on June 7, 2025. The post serves as a claim of successful compromise by the group. However, information regarding the specific identity and background of the group known as global remains limited in the public domain.

Ransomware leak sites are platforms used by cybercriminals to exert pressure on victims. These sites often host announcements to shame organizations into paying ransoms. In many modern cyberattacks, threat actors employ double extortion tactics. This method involves not only encrypting an organization's systems to disrupt operations but also stealing sensitive data to threaten its public release. By threatening to leak information, attackers increase their leverage, as the reputational and legal consequences of a data leak can be more damaging than the operational downtime caused by encryption.

Scope of the alleged data breach

Regarding the specifics of the incident, the nature and scope of the allegedly leaked data have not been disclosed by the threat actor. There is no screenshot available to verify the contents of the breach, and the listing names no specific data types.

Organizational profile

Morpeth Pharmacy, also known as Wellway Pharmacy Limited, is a pharmacy operating in Morpeth, Northumberland, UK. It provides essential pharmaceutical services, including prescription dispensing, health consultations, and the sale of over-the-counter medications.

Risk assessment and sector implications

Given the institution's operation in the healthcare sector, it is possible that the leaked data could pose risks to patient privacy and sensitive health information. In the healthcare industry, the protection of personal health information is paramount due to the highly sensitive nature of medical records. A breach in this sector often carries heightened risks for the individuals involved.

Under Australia's Privacy Act 1988, such a data breach may lead to legal and administrative sanctions for the institution. Furthermore, the possibility of affected individuals being exposed to identity theft or targeted phishing attacks may be observed. When sensitive personal or health information is compromised, attackers often use it to craft highly convincing phishing campaigns or to commit identity fraud.

Secondary risks to the institution's supply chain partners could also emerge from such an incident. In a connected digital ecosystem, a breach in one organization can potentially create vulnerabilities or data exposure risks for its partners. Additionally, the potential for increased ransom demands through double extortion tactics must be considered. To defend against such threats, organizations typically implement multi-layered security strategies, such as robust backup solutions, strict access controls, and continuous monitoring to detect unauthorized activity.