Scott Pharma Solutions Hit by BianLian Ransomware Attack
Incident Date:
August 28, 2024
Overview
Title
Scott Pharma Solutions Hit by BianLian Ransomware Attack
Victim
Scott Pharma Solutions
Attacker
Bianlian
Location
First Reported
August 28, 2024
Ransomware Attack on Scott Pharma Solutions by BianLian Group
Scott Pharma Solutions, a specialized provider of products and services for the care and management of laboratory animals, has recently fallen victim to a ransomware attack orchestrated by the notorious BianLian group. The attack has compromised several critical data sets, posing a significant threat to the company's operations and the confidentiality of its data.
About Scott Pharma Solutions
Established in January 2016 through the merger of Scott’s Distributing and PharmaServ, Scott Pharma Solutions leverages over 50 years of combined experience in the industry. The company serves a diverse clientele, including universities, medical schools, pharmaceutical companies, small biotech firms, and zoos, primarily across New England and Upstate New York. Their core offerings include a comprehensive range of animal feed, bedding, and enrichment products, as well as advanced cleaning and disinfecting solutions. The company is ISO 9001:2008 certified and a member of the Corporate Emergency Access System (CEAS), underscoring their commitment to quality and operational resilience.
Attack Overview
The ransomware attack by BianLian has compromised several critical data sets, including pharmaceutical data, fileserver data, network users' folder data, and sensitive medical data. With a revenue exceeding $5 million, the breach poses a significant threat to Scott Pharma Solutions' operations and the confidentiality of its data. The attack highlights the growing risks faced by organizations in the pharmaceutical and healthcare sectors.
About the BianLian Group
BianLian is a sophisticated ransomware group that has evolved from targeting individual users to launching high-profile attacks on businesses, governmental organizations, healthcare facilities, and educational institutions globally. Initially functioning as a banking trojan, BianLian transitioned into advanced ransomware operations, emphasizing extortion-based strategies. The group gained initial access through compromised Remote Desktop Protocol (RDP) credentials, implanting custom backdoors specific to each victim, and employing various tools for discovery, lateral movement, collection, exfiltration, and impact.
Penetration and Impact
BianLian's tactics include exfiltration of sensitive data, leading to significant financial and reputational consequences for compromised organizations. The group's shift towards exfiltration-based extortion and its global reach underscore the evolving threat landscape posed by ransomware groups. The attack on Scott Pharma Solutions underscores the urgent need for enhanced cybersecurity measures to combat such sophisticated threats.
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.