Drug R&D Firm Facing Costs, Lawsuits in Alleged Qilin Attack

Inotiv Tells SEC 'It's Still Evaluating Full Impact and Notifying Breach Victims' Marianne Kolbasuk McGee (HealthInfoSec) • December 10, 2025

Drug research firm Inotiv in a filing with federal regulators said it is still evaluating the full financial and operational impact of an August cyberattack that's linked to ransomware gang Qilin. The company is also notifying nearly 10,000 people whose data was allegedly stolen in the incident.

See Also: Going Beyond the Copilot Pilot - A CISO's Perspective

Inotiv in a Dec. 3 filing to the U.S. Securities and Exchange Commission said it has restored availability and access to certain IT systems affected by the cyber incident discovered on Aug. 8.

Inotiv had notified the SEC on Aug. 8 about the attack, saying ...