Inotiv
Disclosed Aug 18, 20251 year ago10,482 affectedConfirmed
Qilin ransomware attack on Inotiv exposes 9,542 people
Contract research firm Inotiv disclosed an August 2025 ransomware attack that disrupted operations; it said an attacker had access between August 5 and 8 and notified 9,542 people, mostly employees and family members. Qilin claimed 176 GB of data.
What is known
| People affected | 10,482 (as reported by the organization) |
|---|---|
| Disclosed | Aug 18, 2025 |
| Discovered | Dec 17, 2025 |
| Happened | Aug 5, 2025 |
| Attack | Ransomware |
| Data exposed | Names, Employment, Other, Social Security numbers, Government IDs, Health, Insurance, Payment cards, Financial, Dates of birth, Addresses |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Inotivoag.ca.gov · Official notice | Official notice |
| Pharma firm Inotiv discloses data breach after ransomware attackbleepingcomputer.com · News | News |
| Inotiv Form 8-Ksec.gov · SEC filing | SEC filing |
| Texas Attorney General data security breach report BR-0004756: Inotivoag.my.site.com · Official notice | Official notice |
| Vermont Attorney General: 2025-12-22 Inotiv Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Inotivin.gov · Official notice | Official notice |
| Inotiv, Inc. Form 8-K, Item 8.01 (2026-05-18)sec.gov · SEC filing | SEC filing |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Aug 18, 2025 | 9,542 |
| SEC 8-K 8.01total | Aug 18, 2025 | |
| California AGresidents of CA | Dec 2, 2025 | |
| Indiana AGresidents of IN | Dec 2, 2025 | 3,158 |
| Vermont AGresidents of VT | Dec 22, 2025 | |
| California AGresidents of CA | Dec 23, 2025 | |
| Texas AGresidents of TX | Dec 29, 2025 | 940 |
| SEC 8-K 8.01total | May 18 |
History of this record
- 2026-09-25 · source: empty to https://www.sec.gov/Archives/edgar/data/720154/000110465926063032/tm2614614d1_8k.htm · backfill source
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-12-22-inotiv-data-breach-notice-consumers · backfill source
- 2026-09-25 · data_types: ["names","employment","other"] to ["names","employment","other","ssn","government-id","health","insurance","payment-card","financial","dob","addresses"] · backfill source
- 2026-09-25 · records: 9542 to 10482 · backfill source
- 2026-09-25 · discovered: empty to 2025-12-17 · backfill source
- 2026-09-25 · sector: other to health · seed source
- 2026-09-25 · attack: unknown to ransomware · seed source
- 2026-09-25 · data_types: [] to ["names","employment","other"] · seed source
- 2026-09-25 · records_basis: empty to organization · seed source
- 2026-09-25 · records: empty to 9542 · seed source
- 2026-09-25 · disclosed: 2025-12-02 to 2025-08-18 · seed source
- 2026-09-25 · summary: empty to Contract research firm Inotiv disclosed an August 2025 ransomware attack that disrupted operations; it said an attacker had access between August 5 and 8 and notified 9,542 people, mostly employees and family members. Qilin claimed 176 GB o · seed source
- 2026-09-25 · title: empty to Qilin ransomware attack on Inotiv exposes 9,542 people · seed source
- 2026-09-25 · disclosed: 2025-12-23 to 2025-12-02 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.