Pharmaceutical distributor AmerisourceBergen confirms subsidiary data breach

This week, the Pharmaceutical distributor AmerisourceBergen confirmed that they suffered a cyber attack against one of its subsidiaries following the Lorenz ransomware gang listing AmerisourceBergen with allegedly stolen data on its extortion site. AmerisourceBergen also confirmed that the threat actors compromised the IT system of the targeted subsidiary which could have given the ransomware group a chance to exfiltrate data from the IT system. Although AmerisourceBergen has not yet confirmed the allegedly stolen files are from its networks.

In a statement about the confirmed cyber attack, AmerisourceBergen stated that the intrusion was contained and they are investigating whether the incident has resulted in the compromise of sensitive data. It is believed that the attack might have happened a few months ago as the ransomware group set the post date to November 1st, 2022, even though the files were published just now.