onyx-pharma.dz Listed by Darkpower Ransomware Group

Onyx Pharma, the Algerian pharmaceutical company operating as onyx-pharma.dz, was listed on the DarkPower ransomware leak site on March 11, 2023. The group claims to have exfiltrated internal files during a ransomware attack. Anyone whose personal or medical information passed through the company may now face heightened risk of identity theft and doxxing.

Reported Details from the Listing

The DarkPower leak site states that onyx-pharma.dz suffered a ransomware intrusion and that attackers successfully stole internal data. The listing does not quantify how many records were taken, name specific file types, or disclose the ransom demand. It simply states that internal files were exfiltrated and are now held by the group. The disclosure provides no further technical details about the initial access vector or the precise date of compromise.

Why This Matters for You and Your Family

When a healthcare-adjacent company loses control of internal files, the information inside often includes names, contact details, dates of birth, national identification numbers, prescription records, or insurance information. Even if the leak site does not publish every document immediately, the mere fact that the data has left Onyx Pharma’s environment creates long-term exposure. Medical and pharmacy data commands high value on underground markets because it can be used for insurance fraud, prescription forgery, or targeted phishing that sounds legitimate. If your family has filled prescriptions, received lab results, or interacted with Algerian pharmaceutical suppliers linked to this company, your information could be among the stolen material.

The Doxxing and Identity-Chain Risk

Ransomware operators rarely stop at posting a single sample. Once internal files are in their possession, they map relationships between employee names, customer records, supplier contacts, and any personal documents that were stored on the same systems. These linkages create identity chains: an email address found in one file can be matched to a phone number in another, then tied to social-media handles or children’s school records. The result is a detailed profile that fuels spear-phishing, SIM-swapping attempts, or full identity theft. Credential leaks that surface in these incidents frequently cascade into gaming-account takeovers, especially when parents reuse work passwords for family Steam, Roblox, or other platforms.

DarkPower’s Known Track Record

Public reporting attributes the first appearances of DarkPower to late 2022. The group has targeted organizations across multiple countries, focusing on mid-sized firms in manufacturing, healthcare, and logistics. Their typical playbook begins with phishing or exploitation of remote-desktop services for initial access, followed by rapid lateral movement, data exfiltration, and deployment of ransomware. After encryption they wait a short period before publishing samples on their leak site to pressure victims. In many cases they combine file theft with encryption, giving victims two reasons to pay: recover systems and prevent public release of sensitive data. The exact success rate and total victims remain unclear, but the group continues to maintain an active leak site and issues new listings on a regular basis.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what chains back to the Onyx Pharma breach.
• Rotate any password you used at onyx-pharma.dz or related pharmacy portals anywhere it has been reused, and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught within hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become the next target when credential leaks create doxxing chains.
• Let remediation specialists handle data-broker takedown requests and opt-out processes that would otherwise require weeks of your own time.

The breach of onyx-pharma.dz shows how quickly internal corporate data can become a personal threat to ordinary families. Acting early limits how far attackers and downstream criminals can travel down the identity chain. Start your DoxxScan trial today for continuous monitoring, AI-powered identity-chain mapping, and hands-on help from specialists who manage takedowns and protect both your accounts and your children’s gaming profiles.