Scott Pharma Solutions Hit by BianLian Ransomware Attack

Incident Date: Aug 28, 2024

Attack Overview
VICTIM
Scott Pharma Solutions
INDUSTRY
Healthcare Services
LOCATION
USA
ATTACKER
Bianlian
FIRST REPORTED
August 28, 2024

Ransomware Attack on Scott Pharma Solutions by BianLian Group

Scott Pharma Solutions, a specialized provider of products and services for the care and management of laboratory animals, has recently fallen victim to a ransomware attack orchestrated by the notorious BianLian group. The attack has compromised several critical data sets, posing a significant threat to the company's operations and the confidentiality of its data.

About Scott Pharma Solutions

Established in January 2016 through the merger of Scott’s Distributing and PharmaServ, Scott Pharma Solutions leverages over 50 years of combined experience in the industry. The company serves a diverse clientele, including universities, medical schools, pharmaceutical companies, small biotech firms, and zoos, primarily across New England and Upstate New York. Their core offerings include a comprehensive range of animal feed, bedding, and enrichment products, as well as advanced cleaning and disinfecting solutions. The company is ISO 9001:2008 certified and a member of the Corporate Emergency Access System (CEAS), underscoring their commitment to quality and operational resilience.

Attack Overview

The ransomware attack by BianLian has compromised several critical data sets, including pharmaceutical data, fileserver data, network users' folder data, and sensitive medical data. With a revenue exceeding $5 million, the breach poses a significant threat to Scott Pharma Solutions' operations and the confidentiality of its data. The attack highlights the growing risks faced by organizations in the pharmaceutical and healthcare sectors.

About the BianLian Group

BianLian is a sophisticated ransomware group that has evolved from targeting individual users to launching high-profile attacks on businesses, governmental organizations, healthcare facilities, and educational institutions globally. Initially functioning as a banking trojan, BianLian transitioned into advanced ransomware operations, emphasizing extortion-based strategies. The group gained initial access through compromised Remote Desktop Protocol (RDP) credentials, implanting custom backdoors specific to each victim, and employing various tools for discovery, lateral movement, collection, exfiltration, and impact.

Penetration and Impact

BianLian's tactics include exfiltration of sensitive data, leading to significant financial and reputational consequences for compromised organizations. The group's shift towards exfiltration-based extortion and its global reach underscore the evolving threat landscape posed by ransomware groups. The attack on Scott Pharma Solutions underscores the urgent need for enhanced cybersecurity measures to combat such sophisticated threats.

See Halcyon in action

Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!

1
2
3
Let's get started
1
1
2
3
1
1
2
2
3
Back
Next
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.