THT Bio-Science, France Listed by nightspire Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On 9 December 2025 the nightspire ransomware group listed THT Bio-Science, a French organisation, on its public leak site and stated that internal files had been taken during a ransomware operation. No figure for the number of people affected has been released, and the organisation has not issued a public statement confirming or denying the claims. The incident is one of many recent listings involving European entities that hold specialised scientific or technical data.

Inside the incident

The only confirmed public information is the listing itself and the group’s assertion that internal files were exfiltrated. No date of intrusion, volume of data, or encryption status has been disclosed. It remains unknown whether the files were published, offered for sale, or later withdrawn from the leak site.

Inside nightspire

Nightspire is a ransomware operator that maintains a leak site to publish data taken from organisations that do not meet its payment demands. The group follows the common double-extortion pattern of encrypting systems and threatening to release stolen material. Its listings have previously included companies in manufacturing, technology and research sectors across Europe and North America. The appearance of THT Bio-Science on the site constitutes the group’s claim; independent verification of the data or the intrusion has not been made public.

Who is THT Bio-Science, France?

THT Bio-Science operates in the biotechnology sector in France. Organisations of this type typically conduct laboratory research, maintain proprietary processes and store records relating to experiments, collaborators and regulatory compliance. Because such entities often work with sensitive scientific information and sometimes with health-related datasets, they are frequent targets for groups seeking high-value intellectual property or leverage for extortion.

What data was at risk

The listing refers only to “internal files.” No inventory of file types, categories or record counts has been released. In the absence of further detail it is not possible to state precisely which records were taken. Biotechnology companies commonly hold research documentation, partner correspondence and administrative records; whether any of these categories were present in the exfiltrated material remains unconfirmed.

The real-world impact

Exposure of internal scientific or operational files can create competitive or regulatory consequences for the organisation and, depending on content, privacy or safety considerations for any individuals named in the records. At present the scale of any such exposure is unknown, so the concrete effects on staff, research partners or the public cannot be quantified from available information.

If your data was in this claimed breach

Individuals who have professional or research dealings with THT Bio-Science should monitor official communications from the organisation for any guidance on next steps. A practical first measure is to review recent account activity on any services linked to the organisation and to enable or strengthen multi-factor authentication. Readers may also run a free exposure scan of their email address against known breach datasets to check whether their information appears in other publicly reported incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.