On December 5, 2023, Vyera Pharmaceuticals appeared on the leak site operated by the Black Basta ransomware group. The New York-based company, which develops treatments for serious and neglected diseases, had 226 GB of internal files listed as exfiltrated from its network at ny.vyera.com. The disclosure indicates that data categories include R&D materials, HR records, W-9 forms, and confidentiality agreements, although the exact number of affected individuals remains unknown.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch vyera.com
Get alerted the next time vyera.com files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about vyera.com’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Details in the Leak Listing
The Black Basta leak site entry explicitly names Vyera Pharmaceuticals at its address of 600 Third Avenue, 19th Floor, New York, NY 10016. It lists the compromised domain as ny.vyera.com and enumerates several domain administrator accounts that were apparently accessed during the intrusion. The posting states that 226 GB of data was taken, broken down into folders marked R&D, HR, W-9 forms, and confidentiality documents. No ransom demand figure or payment deadline is shown in the public listing, and the precise contents of the files are not described beyond those category labels.
Why This Matters for You and Your Family
When a pharmaceutical company’s internal files are stolen, the information often contains personal details that reach far beyond the workplace. W-9 forms include taxpayer identification numbers, addresses, and full legal names. HR records frequently hold Social Security numbers, dates of birth, family contact information, and banking details for direct deposit. If you or a family member ever worked with or for Vyera, received payments from them, or had any contractual relationship, your personally identifiable information may now sit in an attacker’s archive. Even if you are not directly connected, these leaks fuel broader identity theft operations that target ordinary households through reused credentials and public records.
Doxxing and Identity-Chain Risks
Exposed internal files create long-term doxxing hazards because they link professional identities to personal data. A single W-9 or HR document can give attackers the bridge between an email address, phone number, physical address, and employer history. That information is then cross-referenced with other breaches to build detailed profiles. Credential leaks like the domain accounts listed here often cascade into account takeovers on personal email, banking, or healthcare portals. For families this risk extends to children: a parent’s work breach can expose household details that lead to gaming account compromises where kids use the same email or password patterns. Once handles are connected to real identities, harassment, targeted phishing, and financial fraud become significantly easier.