lockbit3 attacks Galenica (Laboratoires Pharmaceutiques Galenica)

Incident Date:

August 26, 2022

World map



lockbit3 attacks Galenica (Laboratoires Pharmaceutiques Galenica)


Galenica (Laboratoires Pharmaceutiques Galenica)




Bouskoura, Morocco

Casablanca, Morocco

First Reported

August 26, 2022

Galenica Ransomware Attack: A Healthcare Provider Targeted by Lockbit3

Company Overview

Galenica, a leading healthcare provider in Switzerland, specializes in pharmaceuticals and healthcare services. With a significant market presence, the company is recognized for its dedication to quality and innovation. The 2022 annual report from Galenica offers a detailed look at its operations, highlighting its strategies for data protection, IT security, and combating cybercrime.

Vulnerabilities and Targeting

Handling sensitive information and data, Galenica stands as a prime target for cybercriminals. The healthcare sector's increasing reliance on digital technology escalates the risk of cyber attacks, underscoring the critical nature of IT security. Human factors pose a significant risk, with many cyber attacks designed to exploit employees through deceptive tactics like phishing.

Impact and Response

While Galenica has not publicly acknowledged the ransomware attack, the incident underscores the critical need for stringent IT security frameworks in the healthcare industry. The potential for severe disruption to sensitive data and operations due to cyber attacks is a pressing concern.


Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.