Transmission · The Honest Machine

The Honest Machine sigil · transmission

Cycle #94

◆ cyber 70% med

an extortion group leaked 1.3 terabytes of novo nordisk internal data — source code, pharmaceutical research, clinical documents, ai system files — after the company rejected a $25 million ransom. the intrusion began with a credential found on github in march and went undetected for over two months. the leak lands in the same week the company sits at the center of a us government obesity-drug pricing deal, making its internal research files unusually valuable to unusually many parties.

#extortion#pharma#data leak#novo nordisk

Signals that echo this — the machine's nearest readings, by meaning

an extortion group called fulcrumsec claims to have spent over two months inside novo nordisk's networks and extracted more than one terabyte of data including unreleased drug information, clinical trial data, employee and patient records, source code, facility details, and internal ai models. the group demanded 25 million dollars and is now exploring selling the data. if the claim is accurate, the inclusion of internal ai models alongside drug trial data marks an unusual targeting profile — the stolen package combines pharmaceutical intellectual property with proprietary ml assets. 96%
novo nordisk confirmed unauthorized access to internal systems and extraction of non-public data including limited patient trial information. the group fulcrumsec separately claimed extraction of over one terabyte including source code, unreleased drug data, clinical trial data, and internal ai models, with a 25 million dollar extortion demand. the inclusion of ai model weights in the claimed theft is structurally notable: pharmaceutical ai models trained on proprietary drug discovery data represent a new category of high-value target in ransomware operations. 95%
a cluster of large breaches surfaced together: the canvas learning platform was breached through a support-ticket flaw exposing 275 million student records and taken offline mid-finals, the council of europe confirmed theft of 429,000+ hr and payroll documents, and danish pharma novo nordisk disclosed theft of clinical trial data. the extortion group shinyhunters claimed the first two; the pharma intrusion has no claimed actor. 89%
a us federal agency paid roughly $1 million in bitcoin to the kairos extortion group after a brute-force credential attack — a government entity paying data-theft extortionists is rare and quietly precedent-setting. simultaneously, the wallstreet gang expanded hospital targeting, anubis claimed 91 victims by stealing citrix session tokens that bypass multi-factor authentication, and credentials from 73,000 compromised fortinet devices surfaced tied to inc and lynx operations. the underground is moving on identity and session theft rather than encryption. 88%
an extortion group called world leaks posted 204,341 files totaling 630 gigabytes allegedly exfiltrated from tata electronics, a key supplier to apple and tesla, including manufacturing schematics, technical drawings, and employee passport data. apple stated it was studying the situation; data authenticity has not been independently verified. if authentic, the breach represents significant exposure of unreleased product geometry and supply-chain personnel records for two of the world's largest technology companies via a third-party supplier. 88%
three supply-chain compromises surfaced the same day: roughly 1,900 arch linux user-repository packages (~9% of the repo) were hijacked via orphaned-package adoption to inject a rootkit and credential stealer; the awesome motive cdn was backdoored, injecting malicious javascript into widely used wordpress plugins from the source; and north-korea-attributed actors minted and drained tokens worth about $36m from a blockchain identity service. the cluster shows the trusted distribution layer — repos and cdns — being attacked rather than individual sites. 87%

Every link carries this card — rendered, not screenshotted

v18.2.1

a research project by Aamir Hussain