Novartis experienced a cyber attack

On February 25, Pharmaceutical giant Novartis has been attacked by Industrial Spy hacking group. The company ensures no sensitive data has been compromised during the incident.

Photo by Lianhao Qu

Industrial Spy is a hacking group that runs an extortion marketplace where they sell data stolen from compromised organizations.

On June 2, the hacking group began selling data allegedly stolen from Novartis on their Tor extortion marketplace for $500,000 in BTC.

The data being sold consists of 7.7 Mb of PDF files which is considered not a big amount of data among ransomware gangs. Industrial Spy does not provide more information on the data leak, so it stays unclear if 7.7 Mb is the total amount of data they possess.

In an official response Novartis declined any sensitive data being stolen and confirming awareness of an incident itself.

💡 Do you think you’re off the radar?

Your data might already be exposed. Most companies find out too late. Let ’s change that. Trusted by 100+ security teams.

🚀Ask for a demo NOW →
🛡️ Dark Web Monitoring FAQs

Q: What is dark web monitoring?

A: Dark web monitoring is the process of tracking your organization’s data on hidden networks to detect leaked or stolen information such as passwords, credentials, or sensitive files shared by cybercriminals.

Q: How does dark web monitoring work?

A: Dark web monitoring works by scanning hidden sites and forums in real time to detect mentions of your data, credentials, or company information before cybercriminals can exploit them.

Q: Why use dark web monitoring?

A: Because it alerts you early when your data appears on the dark web, helping prevent breaches, fraud, and reputational damage before they escalate.

Q: Who needs dark web monitoring services?

A: MSSP and any organization that handles sensitive data, valuable assets, or customer information from small businesses to large enterprises benefits from dark web monitoring.

Q: What does it mean if your information is on the dark web?

A: It means your personal or company data has been exposed or stolen and could be used for fraud, identity theft, or unauthorized access immediate action is needed to protect yourselfsssss.