Drug maker MSD hit by ransomware, Indian website down

US drug maker Merck, known as MSD outside the United States and Canada, the maker of top-selling diabetic drug Januvia and cervical cancer vaccine Gardasil, among others, said its computer network was compromised on June 27 as part of a global cyber-attack.

The website of MSD India was still down at the time of filing the story, while its global website is up and running.

“We believe we have contained the problem and are working on recovery plans with our external IT partners,” MSD said in its latest update.

“We also are cooperating with global cyber security agencies given the scope of the attack,” the statement added.

MSD said as it is addressing the potential impact to its business, while it continues to work on minimizing disruption to patients, customers and its other business partners.

The global pharma major said it it immediately shut down its IT systems as a precautionary measure to help contain the problem and, where needed, moved to business continuity plans to ensure ongoing operations.

“To meet patient and customer needs, we are working to maintain a sufficient supply of medicines and vaccines,” MSD said.

MSD was hit by a ransomware that infects and locks a computer system, and then demands a USD 300 ransom to be paid in bitcoins.

Many firms, including Symantec, have suggested the ransomware is a variant of Petya, a known ransomware. But according to security firm Kaspersky Lab, preliminary findings indicate the attacks are from a new ransomware that it's now calling "ExPetr." The attackers were using a Windows operating system flaw called EternalBlue to spread through corporate networks.

MSD with sales of around USD 40 billion in 2016 is one of the world’s biggest drug makers.

To be sure – the hackers didn’t limit their attacks on MSD alone; They have penetrated the networks of several big corporates including British advertising agency WPP, Russian oil and gas giant Rosneft, global logistics company FedEx and Danish shipping firm Maersk, among others.