Personal data believed stolen in cyberattack at pharma company

KUALA LUMPUR: Pharmaceuticals manufacturer Duopharma Biotech Bhd has been hit by a cyberattack, with preliminary investigations indicating that a set of data files had been removed, which may include personal data.
“Preliminary investigations have confirmed that there has been no disruption to our core business operations, and all corporate activities continue to function normally,” the company said in a filing with Bursa Malaysia today.
Duopharma said the intrusion was detected by its internal cyber defence systems, which identified an unauthorised system access attempt.
“Immediate containment protocols were successfully executed. To date, the core corporate network and internal operational systems are intact and remain fully secure and functional,” it said.
The company said it will work with relevant internal and external cybersecurity specialists where necessary to conduct a digital forensic investigation and determine the exact scope of the files involved.
“The company’s cyber security environment will also be reviewed and, if necessary, additional measures will be implemented to strengthen the security of the company’s systems and data,” it added.
The company believes there are no financial implications, while it continues to assess the impact as further information emerges from the ongoing investigation.
In relation to the suspected theft of personal data, the company will notify the Personal Data Protection Commissioner within the prescribed timeframe, it said.
Duopharma manufactures and markets more than 300 generic drugs, including some popular over-the-counter such as vitamin supplements and painkillers. On the stock exchange today, the company’s share price closed at RM1.22.