Inotiv

Disclosed Aug 18, 202510,482 affectedConfirmed

Qilin ransomware attack on Inotiv exposes 9,542 people

Contract research firm Inotiv disclosed an August 2025 ransomware attack that disrupted operations; it said an attacker had access between August 5 and 8 and notified 9,542 people, mostly employees and family members. Qilin claimed 176 GB of data.

What is known

People affected	10,482 (as reported by the organization)
Disclosed	Aug 18, 2025
Discovered	Dec 17, 2025
Happened	Aug 5, 2025
Attack	Ransomware
Data exposed	NamesEmploymentOtherSocial Security numbersGovernment IDsHealthInsurancePayment cardsFinancialDates of birthAddresses
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Inotiv

Newsbleepingcomputer.com

Pharma firm Inotiv discloses data breach after ransomware attack

SEC filingsec.gov

Inotiv Form 8-K

Official noticeoag.my.site.com

Texas Attorney General data security breach report BR-0004756: Inotiv

Official noticeago.vermont.gov

Vermont Attorney General: 2025-12-22 Inotiv Data Breach Notice to Consumers

Official noticein.gov

Indiana Attorney General 2025 data breach report: Inotiv

SEC filingsec.gov

Inotiv, Inc. Form 8-K, Item 8.01 (2026-05-18)

Notices filed

TotalAug 18, 2025

Research9,542 people

TotalAug 18, 2025

SEC 8-K 8.01Count not stated

Residents of CADec 2, 2025

California AGCount not stated

Residents of INDec 2, 2025

Indiana AG3,158 people

Residents of VTDec 22, 2025

Vermont AGCount not stated

Residents of CADec 23, 2025

California AGCount not stated

Residents of TXDec 29, 2025

Texas AG940 people

TotalMay 18

SEC 8-K 8.01Count not stated

History of this record

source2026-09-25

empty to https://www.sec.gov/Archives/edgar/data/720154/000110465926063032/tm2614614d1_8k.htmby backfillSource

source2026-09-25

empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdfby backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2025-12-22-inotiv-data-breach-notice-consumersby backfillSource

data_types2026-09-25

["names","employment","other"] to ["names","employment","other","ssn","government-id","health","insurance","payment-card","financial","dob","addresses"]by backfillSource

records2026-09-25

9542 to 10482by backfillSource

discovered2026-09-25

empty to 2025-12-17by backfillSource

sector2026-09-25

other to healthby seedSource

attack2026-09-25

unknown to ransomwareby seedSource

data_types2026-09-25

[] to ["names","employment","other"]by seedSource

records_basis2026-09-25

empty to organizationby seedSource

records2026-09-25

empty to 9542by seedSource

disclosed2026-09-25

2025-12-02 to 2025-08-18by seedSource

summary2026-09-25

empty to Contract research firm Inotiv disclosed an August 2025 ransomware attack that disrupted operations; it said an attacker had access between August 5 and 8 and notified 9,542 people, mostly employees and family members. Qilin claimed 176 GB oby seedSource

title2026-09-25

empty to Qilin ransomware attack on Inotiv exposes 9,542 peopleby seedSource

disclosed2026-09-25

2025-12-23 to 2025-12-02by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Inotiv