Crypto24 group claims attack on Malaysia's Antah HealthCare
Ransomware group Crypto24 has listed Antah HealthCare Group, a Malaysian distributor of pharmaceuticals and medical devices, on its leak site. The listing was reported by the @Ransom_DB account and remains unconfirmed by the company, with no details on the data involved. Parties connected to Antah should monitor the leak site and the company's official channels.
What happened
Ransomware group Crypto24 has added Antah HealthCare Group, a Malaysian distributor of pharmaceuticals and medical devices, to its leak site. The listing was reported by the @Ransom_DB account. The company has not confirmed the case, and there are no details about the data involved.
Why it matters
If confirmed, data from Antah and its partners in Malaysia's healthcare chain could be exposed. The company serves hospitals, clinics and pharmacies nationwide with distribution, logistics and product support, so any disruption would hit a key link in that supply chain.
What to do
Treat it as an unconfirmed claim: monitor the Crypto24 leak site and Antah's official channels. If Antah is a supplier or partner, contact the company and review dependency on its distribution services.
For the technical team
- Affected
- Antah HealthCare Group (distribuidora malásia de produtos farmacêuticos, dispositivos médicos e produtos de saúde) · Antah HealthCare Group, Malaysian distributor of pharmaceuticals, medical devices and consumer health products.
- Exploitation
- Attack claim reported by the @Ransom_DB account: ransomware group Crypto24 listed the victim on its leak site. No confirmation from the company and no details about the data.
- Fix
- No software to update
- More details
- Company website: antahhealthcare[.]com[.]my. Antah serves hospitals, clinics and pharmacies across Malaysia with supply chain, logistics and product support services. No information on intrusion vector, extortion deadline or samples of published files.
Timeline
Incident opened.
Sources 1 source
- @Ransom_DB @Ransom_DB
