On February 24, 2025, pharmaceutical company bms.com appeared on the leak site of the ransomware group apt73. Internal files containing personal data across 302 lines were allegedly exfiltrated during a ransomware attack, with the company’s data now publicly listed for anyone to access.
Watch bms.com
Get alerted the next time bms.com files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about bms.com’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Reported Details of the Incident
Public reporting indicates that bms.com, a pharmaceutical firm, suffered a ransomware intrusion in which attackers copied internal documents before encrypting systems. The apt73 group posted proof of the exfiltration on its leak site, showing 302 lines of personal data. No exact victim count has been disclosed, and the precise nature of the personal information—such as names, addresses, dates of birth, or medical details—has not been independently verified beyond the group’s posting. The incident follows the group’s standard pattern of stealing data prior to deploying ransomware and then threatening to publish it if demands are not met.
Why This Matters for You and Your Family
When a company that may hold records about your prescriptions, insurance, or family health information is breached, the exposed data can be used to target you directly. Personal data from pharmaceutical firms often includes details that are difficult to change, such as your date of birth, address, or Social Security number if it was part of employee, patient, or vendor files. Once that information reaches public leak repositories, it stays available indefinitely. Criminals combine it with other breaches to build complete profiles, increasing the risk of identity theft, fraudulent accounts opened in your name, or harassment campaigns against you or your children.
The Doxxing and Identity-Chain Risks
Leaked personal records rarely stay isolated. Attackers link an email or phone number from one breach to usernames on social media, gaming platforms, or shopping sites. This creates an identity chain that can lead to doxxing, where your home address, family members’ names, and daily routines become public. Credential leaks like this one frequently cascade into account takeovers on gaming services, especially for children who reuse passwords or email addresses tied to family accounts. What begins as a corporate ransomware incident can end with stalkers or scammers contacting your family through compromised Discord, Roblox, or other gaming logins.