Perrigo Company listed on Termite ransomware leak site

• Ransomware group: Termite
• Country: Ireland
• Sector: Healthcare
• Announcement date: March 14, 2025

Termite group claims data breach at Perrigo Company

The threat actor group known as Termite has listed Perrigo Company on its leak site, claiming to have obtained data belonging to the organization. This announcement, which appeared on the group's portal, marks a new potential incident involving a major player in the global healthcare sector.

According to the announcement published on March 14, 2025, the Termite group claims to have gained unauthorized access to the organization's systems. The group asserts that this access allowed them to perform a data exfiltration, moving sensitive information from the victim's internal environment to their own controlled infrastructure. While the group has made these claims publicly, it is important to note that information regarding this specific threat actor group remains limited in the public domain, making it difficult to ascertain their full capabilities or typical operational patterns.

Details regarding the claimed data exfiltration

At this stage, the details provided by the threat actor are quite sparse. While the group has officially listed the organization on their leak portal, they have not provided specifics regarding the scope of the incident. There is no detailed information available on the leak site regarding the nature or scope of the compromised data.

The listing names no specific data types that have been allegedly stolen during the operation. Consequently, the exact volume of information and the specific categories of files involved remain unknown to the public at this time.

About Perrigo Company

Perrigo Company is a global healthcare company that has been operating since 1887. Headquartered in Dublin, Ireland, the company plays a significant role in the international medical supply chain. They specialize in the manufacturing and supply of over-the-counter pharmaceuticals and private-label healthcare products, serving a wide range of markets through their specialized production capabilities.

Potential risks and industry implications

This claim may pose risks to the organization's operational continuity and data privacy. As an Ireland-based entity, potential data breaches may lead to regulatory consequences under the EU General Data Protection Regulation (GDPR). The legal framework governing data protection in the European Union imposes strict requirements on how organizations handle personal information, and any confirmed breach can trigger significant oversight and potential penalties.

Depending on the content of the leak, the exposure of employee or customer data could facilitate identity theft and targeted phishing attacks. In such scenarios, attackers often use stolen credentials or personal identifiers to conduct social engineering campaigns, tricking individuals into revealing further sensitive information or transferring funds.

Furthermore, should the threat actor employ double extortion tactics, it may increase financial and reputational pressure on the organization. Double extortion is a common ransomware tactic where attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage. By threatening to release the stolen data publicly, the attackers aim to force the victim into paying a ransom to prevent the exposure of confidential information.

For organizations in the healthcare sector, maintaining robust cybersecurity defenses is critical. Common defensive steps include implementing multi-factor authentication, maintaining regular offline backups, and conducting frequent vulnerability assessments. Given the sensitive nature of healthcare data, continuous monitoring and rapid incident response capabilities are essential to mitigate the impact of such claims and protect the privacy of patients and employees alike.