Therabel Lucien Pharma SAS listed on Hunters ransomware leak site
The ransomware group known as Hunters claims to have leaked data belonging to Therabel Lucien Pharma SAS on their leak site.
- Published
- 2 min read
- 2 min read
- Ransomware group: Hunters
- Country: France
- Sector: Healthcare
- Announcement date: October 11, 2024
Hunters claims data exfiltration against Therabel Lucien Pharma SAS
The ransomware group known as Hunters has claimed responsibility for a data breach involving the French pharmaceutical company Therabel Lucien Pharma SAS. According to an announcement made on the group's leak site on October 11, 2024, the threat actors allege they have successfully exfiltrated data from the organization. This development follows a claimed attack date of September 1, 2024.
In this instance, the group's tactics appear to align with modern extortion trends. The announcement suggests that the organization's data may be published publicly or offered for sale on the dark web. Notably, the group alleges that they have exfiltrated data from the organization but did not perform any encryption on the victim's systems. This focus on data theft rather than system locking is a hallmark of evolving cyber extortion strategies.
Details of the claimed breach
While the threat actor group has officially listed the organization on their leak site, specific technical details regarding the breach remain limited. The announcement indicates that the group has gained access to sensitive information, yet the group has not provided specific information regarding the exact scope or type of the leaked data. There is no information available regarding the total size of the data stolen or the specific number of files involved.
Furthermore, the group has not issued a ransom demand, and there is no information regarding a specific monetary value requested for the return or non-disclosure of the data. The listing itself includes a screenshot displaying a list of various documents and files under the heading 'Confidential'; however, the group has not provided detailed information regarding the exact scope or type of the leaked data within that list.
About Therabel Lucien Pharma SAS
Therabel Lucien Pharma SAS is a pharmaceutical company based in France. The organization specializes in the development and marketing of medical products. Their professional focus is particularly centered in the fields of pain management, rheumatology, and urology.
Analysis and implications for the healthcare sector
The nature of this incident highlights significant risks inherent to the healthcare and pharmaceutical sectors. Because the organization operates in a field involving sensitive medical information, the potential misuse of patient or employee information represents a heightened risk. Organizations in this sector must remain vigilant against secondary attacks or identity theft that often follow such breaches.
The Hunters group is assessed to be derived from Hive code. This connection is significant for threat intelligence analysts monitoring the evolution of ransomware groups. Reports suggesting that the group ceased encryption activities in 2025 may indicate that the group's focus could be shifting toward data exfiltration and extortion, a trend increasingly seen in the cybercrime landscape. This shift toward