Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

corepharma.com

corepharma.com

Group Chaos
Discovered 2026-07-08 07:22 UTC
Est. attack date 2026-07-08
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation
Data exfiltrated 240 GB

Description:

DATA EXPOSURE: CorePharma – Full GMP & Regulatory Compromise We are officially announcing that our security team has successfully breached the internal network of CorePharma. We are currently in possession of a comprehensive archive of the company’s internal operations, including sensitive regu…

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusegodaddy.com
MX Records
  • d365428b.ess.barracudanetworks.com. Barracuda
  • d365428a.ess.barracudanetworks.com. Barracuda
TXT Records
  • v=spf1 ip4:47.19.90.250 include:spf.protection.outlook.com include:spf.ess.barracudanetworks.com -all
  • v=verifydomain MS=2141925
  • pardot1111973=9d05cd3e95a49b4ff8a2bb2f6f582f213cd7d318bd04a75cdae30c1de1910186
  • google-site-verification=a7YbqMEWrnY5Z2f9h7bI7KmktQqGmJe2PR4H7LD7ZMw
  • v=verifydomain MS=6728413
  • google-site-verification=H0MgyEl4st8D_8rxrNutOPRpQJTFWM_S7YsYNJoOIHU
  • google-site-verification=OyNKo8b_YRe57-BmdfCl2vYxaty0gkGSRCo5Tr0_fls
  • sending_domain1111973=9260aa77c6adca68cf50f7a5d0edcc20231aabe81034e1230c95b127328f889c
Cloud / SaaS Services Detected
Microsoft 365 Salesforce

Leak Screenshot:

Leak Screenshot