Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Johnson & Johnson Innovative Medicine

www.jnj.com/innovativemedicine

Discovered 2026-05-04 13:26 UTC
Est. attack date 2026-04-26
Country US

Description:

Johnson & Johnson Innovative Medicine (formerly known as Janssen Pharmaceuticals) is the pharmaceutical division of the American corporation Johnson & Johnson, specializing in the development and production of revolutionary medicines. The company focuses on creating treatments for the most complex diseases, transforming the future of healthcare.-CAR-T Research https://www.jnj.com/innovativemedicine/

Infostealer activity detected by HudsonRock

Compromised Employees: 209

Compromised Users: 14640

Third Party Employee Credentials: 274


External Attack Surface: 170


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusereportkey-systems.net
  • abusekey-systems.net
  • infodomain-contact.org
MX Records
  • mx2.jnj-sd.iphmx.com. Cisco/IronPort
  • mx1.jnj-sd.iphmx.com. Cisco/IronPort
TXT Records
  • 6jefauevv7fvvdu964rl13s7fp
  • AS2TrustedDomains=*.jnj.com,*.na.jnj.com,*.ap.jnj.com,*.eu.jnj.com
  • MS=ms35346992
  • MS=ms51784696
  • MS=ms53457855
  • ilk191c6p5a028aq84ftf8r506
  • v=spf1 include:_u.jnj.com._spf.smart.ondmarc.com -all
Cloud / SaaS Services Detected
Microsoft 365

Leak Screenshot:

Leak Screenshot