service disruption claim Public report: Date confidence: Medium

Fallas de pago de Farmatodo con presunto hackeo de sus sistemas

Las fallas de delivery, autopago y puntos integrados de Farmatodo fueron reportadas el 27 de junio de 2024 junto con una alegación de hackeo de sus sistemas de pago. Aporrea conserva una reproducción explícitamente atribuida a Sumarium, que dijo observar operación con efectivo y posteriormente tarjetas mediante POS externos. El post de Naldoxx reportó varios canales todavía indisponibles a las 22:30 locales y la disponibilidad de puntos portátiles. 2001 atribuyó la hipótesis de ataque y autoría a publicaciones sociales y señaló que entonces no había reporte oficial; Tecnochui habló de un ataque posible. La alegación se limita al episodio del 27 de junio, con causa maliciosa incierta. La pregunta de x01x00 a Farmatodo no reclama responsabilidad ni demuestra Medusa, ransomware, acceso, cifrado, exfiltración, riesgo de datos o alcance nacional uniforme. No se probó continuidad con el reclamo Akira publicado en enero de 2025; tampoco se lo descarta como imposible.

Overview

Missing evidence

comunicado o registro de Farmatodo sobre causa, alcance y recuperacióntelemetría, logs, IOC, muestra, hash o análisis forense que demuestre un incidente cibernéticoreclamo inequívoco del responsable o evidencia independiente que vincule a Medusa o @x00x01x01confirmación de ransomware, acceso, cifrado, extracción o datos en riesgomedición verificable del alcance geográfico y duración por canal

Impact details

Durante el 27 de junio se reportó indisponibilidad de varios canales de pago y servicios relacionados. El efectivo y luego los puntos de venta externos o portátiles ofrecieron alternativas parciales. No se confirmó pérdida, exposición o modificación de datos, cifra de personas, pérdida financiera, alcance geográfico, compromiso de sistemas ni causa cibernética.

puntos de venta integrados y cajasautopagopago móvil y vueltopago con tarjeta para deliveryrecargas móviles prepagadasBiopago y Zelle

Classification & severity

Category
Availability
Subtype
service disruption claim
Confidence
Low

Los reportes contemporáneos alegan un hackeo de servicios de pago de Farmatodo durante la contingencia del 27 de junio. Tecnochui plantea un ataque posible; Aporrea reproduce explícitamente Sumarium. La alegación acotada tiene causa incierta, sin convertir la pregunta x01x00 en responsabilidad ni atribuir Medusa, cifrado, exfiltración o independencia del reclamo Akira posterior.

Severity assessment

Medium
Functional impact
Degraded (non-critical)
Information impact
None
Affected scope
Organization-wide
Critical service
None
Public confidence
Limited
Recoverability
Supplemented

Varios canales de pago y compra quedaron degradados durante el día, pero efectivo y puntos de venta externos o portátiles permitieron continuidad parcial. No se documentaron interrupción de dispensación, daño de datos, pérdida financiera ni impacto crítico.

Reported disruption Availability

Timeline

Discovery

Sumarium afirmó haber comprobado que Farmatodo aceptaba solo efectivo durante la mañana por indisponibilidad de canales integrados. La observación respalda una interrupción de servicio, no su causa.

Publication

La cuenta x01x00 (@x00x01x01) preguntó a @Farmatodo “Is everything okay?”. El post no nombró a Medusa, no reclamó responsabilidad y no mostró evidencia técnica.

Remediation

Farmatodo comenzó a procesar tarjetas mediante puntos de venta externos, aunque pago móvil, delivery con tarjeta, recargas y otros canales siguieron afectados.

Update

Arnaldo Espinoza reportó que puntos integrados, autopago, Biopago, Zelle, vuelto por pago móvil y la pasarela en línea seguían indisponibles a las 22:30; los puntos portátiles permitían pagar.

Evidence & sources

7 sources
Primary Media report Source confidence: Medium

What this source supports

  • Sumarium says it directly observed Farmatodo accepting only cash on the morning of 27 June and external POS card processing in the afternoon
  • it says mobile payment, delivery-card payment and prepaid mobile reloads were unavailable all day
  • it links the exact x01x00 status asking Farmatodo whether everything was okay
  • it labels the event a hack and links the account to Medusa/Digitel without technical proof or a responsibility claim

Evidence limits

Strongest public evidence for the service contingency because the outlet states it observed the payment methods. Its conclusions about hacking, Medusa and prior incidents are not accompanied by technical evidence, victim confirmation or a responsibility claim.

Relevance to this case

Original report underlying close derivatives; supports the outage and contingency details, not cyber cause or attribution.

Corroborating Media report Source confidence: Medium

What this source supports

  • the article reports cash-only operation on the morning of 27 June and external POS card processing later that day
  • it reports mobile payment, delivery-card payment, self-checkout and prepaid reload unavailability
  • its embedded Tecnochui post reports delivery, self-checkout and integrated POS failures and says attribution is only possible
  • the article calls the event a hack and says Medusa ransomware was used without supplying technical or victim evidence

Evidence limits

Contemporaneous secondary reporting consistent with the original Sumarium account. It does not identify its own store observations, technical evidence or an official Farmatodo source; its ransomware/Medusa wording is unsupported.

Relevance to this case

Corroborates the payment-channel contingency and preserves the Tecnochui report, but does not independently establish cyber cause or attribution.

Corroborating Media report Source confidence: Medium

What this source supports

  • the report says multiple users and news outlets reported delivery, self-checkout and integrated POS failures
  • it explicitly says Farmatodo had issued no official report
  • it presents Tecnochui’s attribution as possible and says other users believed the same possibility
  • it reports the x01x00 question to Farmatodo but does not provide evidence that the account caused the outage

Evidence limits

The article is based on social-media reports, contains no direct Farmatodo or technical evidence and moves from explicit possibility to a group label without substantiation. It corroborates reports of disruption, not a hack or actor.

Relevance to this case

A contemporaneous Venezuelan report that preserves absence of an official statement and the speculative nature of attribution.

Primary Social media Source confidence: Medium

What this source supports

  • at 22:30 integrated POS and self-checkout remained unavailable
  • the post reports no integrated-card, Biopago, Zelle or mobile-payment-change service and no connection between online shopper and the online payment gateway
  • portable POS remained available
  • the author said no Farmatodo statement addressed whether sensitive information might be at risk

Evidence limits

A named contemporaneous observer, not an official Farmatodo statement or forensic source. The post supports channel status and fallback availability, not cause, compromise, actor or data exposure.

Relevance to this case

Adds detailed late-evening availability and contingency status independent of the Medusa inference.

Corroborating Social media Source confidence: Medium

What this source supports

  • the post reports delivery, self-checkout and integrated POS services down
  • it describes the actor inference only as possibly the same criminal associated with Banco de Venezuela and Digitel
  • its sole image is a screenshot of the separate x01x00 question to Farmatodo

Evidence limits

Contemporaneous social report. Its service-status statement is useful corroboration, while its attribution is expressly speculative and relies on a separate ambiguous post.

Relevance to this case

Preserves the exact social report embedded by both stored articles and separates outage reporting from attribution speculation.

x01x00 pregunta a Farmatodo si todo está bien

x01x00 / @x00x01x01 Jun 27, 2024
Attribution Social media Source confidence: Low

What this source supports

  • the exact post addresses @Farmatodo and asks Is everything okay?
  • the post existed before later public outage reports on 27 June
  • the post contains no responsibility claim, Medusa name, ransomware reference, technical detail, demand, proof or media

Evidence limits

An ambiguous target-directed question. Timing and prior media associations can motivate investigation but cannot establish responsibility, ransomware, access or causation.

Relevance to this case

Primary provenance for the exact post that articles treated as an actor signal; retained chiefly to show why it is inadequate attribution evidence.

Hackean Farmatodo y dejan a la cadena sin pagos electrónicos

Agencias / Aporrea; original Sumarium Jun 28, 2024
Primary Media report Source confidence: Medium

What this source supports

  • Preserves Sumarium's alleged payment-system hack and reported cash/external-POS observations for June 27.

Evidence limits

Fresh readable reproduction; original Sumarium was ordinary 403 in this pass. Attribution to Medusa/account remains inference rather than evidence.

Relevance to this case

accessible_publisher_reproduction