2026 MPA Pharma — Rhysida leak-site claim (~5.8TB / 2.9M files; unverified)
Data compromised
Actor claim (unverified): ~2,899,290 files / ~5.8TB including tax/HR/ownership, narcotics/BtM records, card data of executives cited in listing — no attested person census
Technical writeup
Unverified leak-site / extortion claim — Rhysida listing observed September 18, 2026 naming MPA Pharma GmbH (mpapharma.de). Actor advertised ~5.8TB / ~2.9M files with sensitive corporate and controlled-substance documentation claims. Company confirmation not located. recordsAffected 0; companyConfirmed false.
Root cause
Unverified Rhysida ransomware/extortion leak-site listing