Back to Victim Disclosures

MPA Pharma

rhysidaransomware groupmpapharma.com
Published
4h ago

Added Sep 18, 2026

MPA Pharma GmbH is an internationally active, rapidly growing company specializing in the import and trade of high-quality pharmaceuticals, including both patented and generic products. 2,899,290 files, ~5.8 TB Pharmaceutical company Categories: accounting records and database backups, government audits (customs / corporate tax / social security / wage tax), corporate ownership (nominee structure, beneficial-ownership filings, related-party payments), narcotics/BtM records (opioids, cannabis, precursors), litigation files, executive and employee personal data, IT artifacts, pharmacovigilance correspondence. Credit cards with CVV of executives, Oltersdorf ID card valid until 2030, the Pfeiffer letter on the hidden Paranova Pack B.V., UBO passports SQL backups (17.7 million general-ledger rows), commercial register extract (HRB), organizational chart Credentials (TIER 1) - a list of all password files (values not repeated here, stored in the MPA PASSWORDS report) Government audits - customs 17,011.77 EUR with a breakdown, corporate tax +202,203.18 EUR, social security (DRV) 23,134.96 EUR with a separate case against the managing director, wage-tax audit Narcotics (BtM) - permits (318 04 74), reconciliations of 588 rows / 93 differences, fentanyl, hydromorphone, oxycodone, tapentadol, unexplained remainders of 1-13 units, documentation gap 2017-2020, cannabis up to 22 percent THC, precursors Litigation - MSD/Merck memo, settlement agreement, Amgros judgment 5,180,043.09 DKK, complaint to the Ministry of Health, arbitration filing People, security, pharmacovigilance, bulk financial records Artifacts - leadership phone book, employee medical documents, Eli Lilly 2025, AstraZeneca, rebate contracts, a list of all produced reports

Leak Page Screenshot

Organization Details

Organization

MPA Pharma

Domain

mpapharma.com

Country

🇩🇪 DE

Industry Sector

Healthcare

Employees

501-2000

mpapharma.com

Leak Data

Data Size

5.8 TB

Published

Sep 18, 2026

Publication Status

Published

Discovered

Sep 18, 2026

Leak URL
http://rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion/archive.php?company=273
Site OnlineLast scanned 3h ago

Threat Group

rhysida

ransomware group

View full group profile →

Quick Facts

Country🇩🇪 DE
SectorHealthcare
Employees501-2000
Data Size5.8 TB
AddedSep 18, 2026