Cybercrime group Lapsus$ claims the hack of pharma giant AstraZeneca

AstraZeneca, a major pharmaceutical company, has allegedly been hacked by the cybercrime group Lapsus$, resulting in the theft of approximately 3GB of sensitive data, including credentials, internal code repositories, and employee information¹. The stolen data may not contain passwords, but it could still be used to map systems, launch targeted phishing attacks, and disrupt internal operations. The breach, if confirmed, would highlight the evolving tactics used by cybercrime groups to target high-value organizations. Lapsus$ has claimed responsibility for the hack, but AstraZeneca has not yet confirmed the incident. The potential consequences of this breach extend beyond the company itself, as it could have downstream effects on the regulatory environment and supply chain. This incident matters to security practitioners because it underscores the need for robust defenses against sophisticated cybercrime groups, which can have far-reaching implications for the entire industry.