Ransomware.live - Victim: PharmaEssentia Corporation

PharmaEssentia Corporation

pharmaessentia.com

Group Thegentlemen

Discovered 2026-09-09 22:09 UTC

Est. attack date 2026-09-09

Country

Sector

Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Duplicate Entry
This victim has been identified as a duplicate of another entry in our database. However, this may not always be the case: the same organization can be targeted multiple times by the same or different ransomware groups, which may result in separate legitimate entries. Search for related entries

Description:

pharmaessentia.com zoominfo.com/c/pharmaessentia-corp/145441146 PharmaEssentia Taiwanese global biopharma founded in 2003, known for besremi® (ropeginterferon alfa-2b) — the first drug developed in Taiwan ever approved by the FDA (2021) and the only polycythemia vera (PV) therapy approved in both the US and EU. Its innovation: a mono-pegylated long-acting interferon dosed every 2 weeks at home, with disease-modifying potential (reducing JAK2V617F mutant allele frequency) — a premium rare-disease asset vs. hydroxyurea and Jakafi. Financials: $197M+ revenue in 2024 (~89% gross margin), TPEX-listed (6446) with a ~5x stock rally since 2024; next bets: essential thrombocythemia (ET) Phase 3 and myelofibrosis. Bottom line: the Taiwanese biotech that proved a local startup can take a molecule from out-license to FDA approval and global commercialization — a rare-disease champion with an expanding moat.

Infostealer activity detected by HudsonRock

Compromised Employees: 2

Compromised Users: 0

Third Party Employee Credentials: 0

External Attack Surface: 1

Exposure Report

by ParanoidLab

Passwords

2 critical

0 critical

Last queried 2026-09-10 14:29 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails

mispharmaessentia.com
foreignnet-chinese.com.tw

MX Records

us-smtp-inbound-1.mimecast.com. Mimecast
us-smtp-inbound-2.mimecast.com. Mimecast

TXT Records

google-site-verification=Ue4pDE4RzoUZgtrzjtxusQP3Ju0BZ3T5bp2P496NvBY
4ehmtev3flsuhp17m3evu9mske
HZHVkE60boHm4vl4tsKHz1rChpdI7Bylje7z6N/Cg/WJt1tNZ5pzIK4hzDnZFJmX2TdcFR5VLZJF4IoLUqwolw==
anthropic-domain-verification-wj0ay3=9bDKfWAK7pn75BNJc6kkKB5Cq
apple-domain-verification=NFBIC2GZLEAW9GC5
chtsec_phishing_test=IL0VXlMGYlRtpgk9HC_1_FIjG3DvKZOR
v=spf1 include:us._netblocks.mimecast.com ip4:35.208.119.50 ip4:3.223.105.67 include:_spf.salesforce.com include:_spf.createsend.com -all
openai-domain-verification=dv-6qdBPgGz02LKbEzaiIDpbMKt
google-site-verification=kWpg5OYD7HHuL8Lpmrgv_cA-hpoj-Hi1QwAmyiNnUps
MS=ms96738747
a9rgj5hq91phnpi3u1kfkjl6r4
0ed1fe018a1f3d583c6bcc43c38dface0c1ad4486d
rv39mm960a3dq8fr0bire85hmu
knowbe4-site-verification=4a326c61c4ee6f04e466fe6025ac5c32
56pnic26jilhikr4ei5hef7ms
docusign=804653d7-d1e0-4b26-a5e0-33c304364605
4nju63bt2cn999ms2far29e4iq
MS=ms77148670
MS=ms95484830

Cloud / SaaS Services Detected

Anthropic Apple DocuSign KnowBe4 Microsoft 365 Mimecast OpenIA Salesforce

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.