Bigpharmacy.com.my Listed by ransomhub Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target online retailers and healthcare-adjacent businesses, using data theft and public leak-site pressure to extract payments. Against that backdrop, the Malaysian online pharmacy Bigpharmacy.com.my was listed by the RansomHub ransomware group on 17 October 2024. Public reporting states that internal files were exfiltrated in a ransomware attack; the number of people affected remains unknown and further technical detail has not been disclosed. For customers and partners who rely on the site for medications, supplements and medical equipment, any compromise of internal systems raises practical questions about the security of personal and health-related information.

The listing itself is a claim by the threat actor. Independent confirmation of the full scope, the precise method of intrusion, or the exact contents of the taken files has not been published. What follows summarises only the verified public facts and places them in context for people who may have been affected.

Breaking down the breach

According to the available record, Bigpharmacy.com.my appeared on a RansomHub leak site on 17 October 2024. The sole description of the incident states that internal files were exfiltrated in a ransomware attack. No figure has been given for the volume of data, the number of individuals whose records may be involved, or the specific systems that were accessed. Timing of the initial intrusion, the entry vector, and whether any ransom demand was met or refused are all undisclosed. In short, the public record confirms only the listing date, the attribution to RansomHub, and the claim of internal-file exfiltration.

The group behind it: ransomhub

RansomHub is a ransomware-as-a-service operation that became prominent after the disruption of earlier groups such as LockBit. It typically employs double-extortion tactics: encrypting systems while simultaneously stealing data and threatening to publish it on a dedicated leak site if payment is not made. Affiliates of the group have previously targeted organisations across healthcare, retail and professional services, often advertising stolen data packages to increase pressure. The group’s public statements are marketing claims rather than independently verified inventories; listings are therefore treated as assertions until corroborated by the victim or by forensic analysis. In this case, RansomHub claims to hold internal files belonging to Bigpharmacy.com.my; no further victim-specific statements from the group have been recorded in the public summary.

About Bigpharmacy.com.my

Bigpharmacy.com.my is a Malaysian-based online pharmacy that sells healthcare products including medications, supplements, personal care items and medical equipment. It positions itself as a convenient source of authentic products at competitive prices, supported by customer service and professional healthcare advice. Like other e-pharmacies, the business necessarily processes orders, payment details and, in many cases, information linked to prescriptions or health needs. A ransomware incident affecting such an organisation is consequential because the data it holds can combine personal identifiers with sensitive health-related context, and because disruption of service can affect people who depend on timely access to medicines.

The information in question

The only data category named in the public record is “internal files exfiltrated in a ransomware attack.” No inventory of file types, customer records, employee data or financial documents has been released. Organisations of this kind typically maintain customer contact details, order histories, payment references and, where applicable, prescription or medical-equipment information. They may also store supplier contracts, inventory systems and internal correspondence. Because the precise contents remain unconfirmed, it is not possible to state which of these categories—if any—were among the files claimed by RansomHub. Readers should treat any specific data-type assertions beyond the published summary as unverified.

What's at stake

For individuals, the principal risks are misuse of personal or health-related information should the files later appear on criminal markets or be used for phishing and social-engineering campaigns. Even limited internal documents can contain enough detail to craft convincing fraud attempts. For the organisation, the incident carries operational, regulatory and reputational consequences: potential service interruption, the cost of investigation and remediation, and the need to notify customers or authorities under applicable Malaysian data-protection rules. Because the scale of the exfiltration is unknown, the actual impact may range from limited internal disruption to broader exposure; that range cannot yet be narrowed with public evidence.

If your data was in this claimed breach

If you have an account or have placed orders with Bigpharmacy.com.my, treat the possibility of exposure seriously until more detail emerges. Change any passwords that may have been reused on the site, enable multi-factor authentication wherever available, and monitor bank and credit statements for unexpected activity. Be alert to unsolicited emails or messages that reference recent purchases or health needs; such messages may be phishing attempts. Consider placing a fraud alert with relevant credit-reporting services if you believe sensitive identifiers could be involved. Finally, you can run a free exposure scan of your email address to check whether it has already appeared in known breach datasets; that step provides an early indication of whether your contact details are circulating more widely.

AICompiled with AI assistance from public sources and published under our editorial standards.