RansomEXX Claims Responsibility for Attack on Grupo Vargas
The Venezuelan pharmaceutical company Grupo Vargas and its subsidiaries (Laboratorios Vargas, Zuoz Pharma, and Genérico de Calidad) were the target of a ransomware attack attributed to the RansomEXX group, with the estimated date of the attack around December 21, 2024. Around March 4, 2025, RansomEXX listed the victim on its extortion leak site, claiming approximately 37.6 GB of confidential business data (according to the actor, divided into 26 parts). The 37.6 GB figure is corroborated by ransomware trackers (ransomware.live, ransomlook.io); the division into 26 parts comes from the actor’s own listing and has not been independently verified. It is unclear whether the company suffered any financial losses, and there has been no official public acknowledgment of the incident by the Vargas Group.
Overview
Missing evidence
Impact details
RansomEXX added Grupo/Laboratorios Vargas to its list of ransomware victims and data leak sites. Security CHU reported that the group published 37.6 GB of data allegedly originating from the laboratory. Public evidence supports the claim and the alleged size, but not the authenticity of the data, the encryption, or the service disruption.
Classification & severity
- Category
- Malicious code
- Subtype
- Ransomware
- Confidence
- Medium
Ransomware.live and Secondary Coverage support a claim related to the RansomEXX ransomware and a leak site targeting the Vargas Group/Laboratories; publicly available evidence does not confirm encryption or service disruption.
Severity assessment
Medium- Information impact
- Suspected
- Affected scope
- Organization-wide
- Critical service
- Potential
- Public confidence
- Limited
- Recoverability
- Extended
The claim posted on the RansomEXX leak website against a pharmaceutical company has been publicly corroborated and includes an alleged size of 37.6 GB, but the authenticity of the leaked data and its operational impact have not been independently confirmed.
Timeline
RansomEXX listed the Vargas Group as a suspected victim.