LiveBreach Intelligence: data breaches, leaks & ransomware, tracked as they surfaceOngoing protection: GalaxyWarden →
Recent BreachesData breach tracker

Recent Breaches › Alkaloid AD Skopje Breached by Bashe Group

MEDIUM severityReportedHow we verify

Alkaloid AD Skopje Breached by Bashe Group: What Was Reportedly Exposed & What To Do

RBRecent Breaches Breach Intelligence·May 22, 2026
Alkaloid AD Skopje Breached by Bashe Group

Reported May 22, 2026.

MEDIUM
Severity
1
Data types exposed
May 22, 2026
Disclosed
ShareXLinkedInFacebookRedditWhatsAppTelegram

Alkaloid AD Skopje was breached by the Bashe Group, with the incident disclosed on May 22, 2026. The number of people affected and the types of data exposed remain unknown; anyone who may have had an account or relationship with the company should check their records and monitor for suspicious activity.

Severity & verification
MEDIUM severityReported
Data types not itemised.
Based on public reporting. Not independently confirmed by the named organization.
Check your exposure
See every leak and listing tied to your email. We can’t confirm any single incident against the sources we search, so we won’t pretend to. 15-second check, no card, no account. Details go to your inbox.

By running your scan you agree to the Terms and Conditions and the Privacy Policy, and to GalaxyWarden emailing you the results of this scan.

Alkaloid AD Skopje, a pharmaceutical and chemical manufacturer based in North Macedonia, experienced a data breach that appeared in public breach trackers on May 22, 2026. The number of individuals affected and the types of data involved have not been disclosed.

The limited information released so far leaves open questions about the scope and impact of the incident on the organization and any individuals whose records may have been involved.

Inside the incident

The breach was recorded on May 22, 2026. No official statements from Alkaloid AD Skopje have detailed the timeline of discovery, the method of intrusion, or the volume of material accessed. Public reporting has not confirmed whether data was removed from the organization’s systems or whether any specific datasets were targeted.

At present, the scale of the event remains unknown. Organizations in similar situations often require weeks or months to complete forensic reviews before releasing verified information.

How a breach like this happens

Incidents affecting manufacturing and research organizations frequently begin with unauthorized access gained through unpatched software, compromised credentials, or phishing messages directed at staff. Once inside a network, an intruder can explore connected systems that store production records, research data, or employee information.

Attackers may then copy selected files to external locations. The time between initial access and detection varies, and many organizations learn of an event only after data appears on public listing sites or after law-enforcement notification.

Who is Alkaloid AD Skopje?

Alkaloid AD Skopje operates in the pharmaceutical and chemical manufacturing sector. Companies of this type maintain records related to product development, regulatory submissions, supply-chain partners, and personnel. They also process information about clinical studies and commercial customers.

A security event at such a firm can affect both business operations and the privacy of individuals whose data is held for employment, research, or distribution purposes.

The information in question

No specific categories of exposed data have been confirmed in public reports. Pharmaceutical and chemical manufacturers typically hold employee records, supplier contracts, research documentation, and regulatory filings. The exact contents of any material associated with this incident remain unconfirmed.

Why it matters

Individuals connected to the organization may face risks of identity misuse or targeted fraud if personal details were involved. The company itself could encounter regulatory inquiries and operational disruptions while restoring systems and reviewing access logs.

Because the precise data types are not yet known, the full extent of potential consequences cannot be assessed from currently available information.

What to do if you're exposed

Anyone who has had professional or commercial contact with Alkaloid AD Skopje should monitor their financial and medical accounts for unusual activity. Enabling multi-factor authentication on important services and using unique passwords reduces the chance that exposed credentials can be reused elsewhere.

Readers can run a free exposure scan of their email address against known breach data to check whether their information has appeared in public listings. Organizations are advised to follow guidance from data-protection authorities in their jurisdiction regarding notification and remediation steps.

AICompiled with AI assistance from public sources and published under our editorial standards.

Editorial & sourcing policy
Recent Breaches is a breach-monitoring service and news aggregator. We do not exfiltrate, host, purchase, or redistribute stolen data, and we do not hold the data claimed in leak-site listings. Incidents are compiled from publicly accessible sources and threat-intelligence platforms and are reported as claims attributed to their source. We promptly correct or remove material shown to be inaccurate — write to support@galaxywarden.com or press@recentbreaches.com.
Check if you’re exposed →

How this breach connects

Company

CompanyAlkaloid AD Skopje security record
74/100
DoxxScan™ · Moderate doxx risk
B- 79Above-average record

1 reported incident on record.

See Alkaloid AD Skopje’s full breach history →

More recent breaches

Baylor Genetics Notifies on Cybersecurity IncidentAugust 14, 2026Golden State Orthopedics & Spine Breached by BrainCipherJuly 2, 2026Eagle Crest Communities Hit by SafePay RansomwareJuly 2, 2026Colorado Rehabilitation & Occupational Medicine Claimed by IncRansomJuly 2, 2026

Latest breaches

Read GalaxyWarden’s full analysis of the Alkaloid AD Skopje Breached by Bashe Group →

Source: Breachsense

Based on public reporting

Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.

ShareXLinkedInFacebookRedditWhatsAppTelegram