bms.com Listed by APT73 Ransomware Group

On February 24, 2025, pharmaceutical company bms.com appeared on the leak site of the ransomware group apt73. Internal files containing personal data across 302 lines were allegedly exfiltrated during a ransomware attack, with the company’s data now publicly listed for anyone to access.

Reported Details of the Incident

Public reporting indicates that bms.com, a pharmaceutical firm, suffered a ransomware intrusion in which attackers copied internal documents before encrypting systems. The apt73 group posted proof of the exfiltration on its leak site, showing 302 lines of personal data. No exact victim count has been disclosed, and the precise nature of the personal information—such as names, addresses, dates of birth, or medical details—has not been independently verified beyond the group’s posting. The incident follows the group’s standard pattern of stealing data prior to deploying ransomware and then threatening to publish it if demands are not met.

Why This Matters for You and Your Family

When a company that may hold records about your prescriptions, insurance, or family health information is breached, the exposed data can be used to target you directly. Personal data from pharmaceutical firms often includes details that are difficult to change, such as your date of birth, address, or Social Security number if it was part of employee, patient, or vendor files. Once that information reaches public leak repositories, it stays available indefinitely. Criminals combine it with other breaches to build complete profiles, increasing the risk of identity theft, fraudulent accounts opened in your name, or harassment campaigns against you or your children.

The Doxxing and Identity-Chain Risks

Leaked personal records rarely stay isolated. Attackers link an email or phone number from one breach to usernames on social media, gaming platforms, or shopping sites. This creates an identity chain that can lead to doxxing, where your home address, family members’ names, and daily routines become public. Credential leaks like this one frequently cascade into account takeovers on gaming services, especially for children who reuse passwords or email addresses tied to family accounts. What begins as a corporate ransomware incident can end with stalkers or scammers contacting your family through compromised Discord, Roblox, or other gaming logins.

Apt73’s Publicly Known Track Record

Public reporting attributes the attack to apt73, a ransomware group that emerged in recent years and has targeted organizations across multiple sectors. The group’s typical playbook involves initial access through common vulnerabilities or phishing, followed by claimed exfiltration of sensitive files and deployment of ransomware. They then extort victims by threatening to release the stolen data on their leak site if payment is not received. Notable prior victims have included companies in healthcare and technology, though exact details remain based on what the group itself publishes and what independent trackers document.

What to Do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so you can see exactly what this claimed breach connects to.
• Rotate any password you used at bms.com or related pharmaceutical portals anywhere it has been reused, and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours instead of months.
• Cover the household with DoxxScan family protection that includes dependents and your children’s gaming accounts, which often become the weakest link in these identity chains.
• Let remediation specialists handle takedown requests across data brokers and leak sites so you do not have to negotiate or chase them yourself.

The most important step is acting before criminals stitch this new bms.com leak together with earlier ones already circulating. Start your DoxxScan trial today and let its continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage—including children’s gaming accounts—work for your family. One breach does not have to become a permanent threat if you close the gaps quickly.