Inotiv discloses ransomware attack disrupting business operations

Inotiv, a U.S.-based drug research company, reported a ransomware attack that has disrupted its operations and forced key systems offline. The Indiana pharmaceutical services provider disclosed the incident in a filing to the Securities and Exchange Commission, stating the breach was detected on August 8.

The company said preliminary findings revealed that attackers gained unauthorized access to its network and encrypted portions of its data and systems. Inotiv has engaged external cybersecurity experts to investigate the breach and has notified federal law enforcement. Officials did not provide a timeline for when full operations may resume.

The attack has affected several internal networks and applications essential to business processes. To reduce the impact, Inotiv has shifted some operations to offline systems while working to restore normal functionality. The company acknowledged that disruptions are expected to persist for some time.

The Qilin ransomware group has claimed responsibility, asserting it stole approximately 176 gigabytes of data comprising more than 160,000 files. The group has posted samples of the allegedly stolen information on its leak site. Inotiv has not confirmed whether the claims are valid.

Inotiv, which employs about 2,000 specialists and generates annual revenue exceeding $500 million, provides drug development and discovery services to pharmaceutical companies. Its portfolio includes work in medical devices, oncology, neuroscience, and COVID-19 research.