Successful Hack On EU Vaccine Agency

The European Medicines Agency (EMA) says it has been hit by a cyber attack and documents relating to a Covid-19 vaccine have been accessed. There have been several other known cyber attacks that have targeted COVID-19 research and now this attack is known to have successfully stolen data, from the first authorised coronavirus vaccine, outside Russia and China. 

BioNTech, which makes one of the vaccines in partnership with Pfizer, said its regulatory submission was accessed during the attack.

The EMA is currently working on approval of two Covid-19 vaccines, which it expects to conclude within weeks. “EMA has been the subject of a cyber-attack... The agency has swiftly launched a full investigation, in close cooperation with law enforcement and other relevant entities. it said in statement.

In contrast, the vaccine maker BioNTech disclosed more about the incident. “Today, we were informed by the EMA that the agency has been subject to a cyber-attack and that some documents relating to the regulatory submission for Pfizer and BioNTech’s COVID-19 vaccine candidate, BNT162b2, which has been stored on an EMA server, had been unlawfully accessed,” it posted on its website. Furthermore, “Given the critical public health considerations and the importance of transparency, we continue to provide clarity around all aspects of the vaccine development and regulatory processes... Our focus remains steadfast on working in close partnership with governments and regulators to bring our COVID-19 vaccine to people around the globe as safely and as efficiently as possible to help bring an end to this devastating pandemic.”

Recently IBM warned of a sophisticated nation state phishing campaign was against various organisations that provide the cold chain storage needed to distribute the Pfizer vaccine.  Sensitive information on vaccines developed in the West has been sought-after by nation state actors from China, Russia and North Korea for months. 

The attack on the EMA comes the day before the agency is due to update the European Parliament on the progress of the vaccine assessments. 

In October, an Indian pharma giant making Russia’s Sputnik-V vaccine had to close down a number of facilities because of cyber-attacks. Warnings from the National Cyber Security Centre, Microsoft and US authorities have come thick and fast throughout the year.

European Medicines Agency:       BioNTech:        FiercePharma:        Infosecurity Magazine:       BBC:

You Might Also Read:

GCHQ Launches War Against Coronavirus Vaccine Fake News:

 

« Connected Devices Must Be More Secure
FireEye Attacked By A Foreign Government »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

Global Knowledge Training

Global Knowledge Training

Global Knowledge is a worldwide leader in IT and business training, featuring Cisco, Microsoft, VMware, IBM, security, cloud computing, and project management.

CyTech Services

CyTech Services

CyTech provides Forensics Incident Response, Cyber Security and Training services.

Security Stronghold

Security Stronghold

Security Stronghold is focused on protecting computers from malicious programs like viruses, Trojans, spyware, adware, trackware, keyloggers and other kinds of online threats.

CIRCL

CIRCL

CIRCL is the national Computer Incident Response Center of Luxembourg

DXC Technology

DXC Technology

DXC Technology helps global companies run their mission critical systems and operations while modernizing IT, optimizing data architectures, and ensuring security and scalability.

SySS

SySS

SySS is a market leader in penetration testing in Germany and Europe.

Samoby

Samoby

Samoby provide a subscription solution for Mobile Threat Protection and usage control on Android and iOS devices.

CETIC

CETIC

CETIC is an applied research centre in the field of ICT. Key technologies include Big Data, Cloud Computing, the Internet of Things, software quality, and trust and security of IT systems.

Field Effect Software

Field Effect Software

Field Effect Software build sophisticated and integrated IT security, threat surface reduction, training and simulation capabilities for enterprises and small businesses.

Kape Technologies

Kape Technologies

Kape Technologies is a cybersecurity company focused on helping consumers around the world have a better digital experience with greater privacy and protection.

Next Peak

Next Peak

Next Peak provides cyber advisory and operational services based on deep business and national security experience, thought leadership, and a network of front-line defenders.

Rimini Street

Rimini Street

Rimini Street is a global provider of enterprise software support products and services, and the leading third-party support provider for Oracle and SAP software products.

Intel 471

Intel 471

Intel 471 provides adversary and malware intelligence for leading intelligence, security and fraud teams.

Josef Ressel Centre for Intelligent & Secure Industrial Automation

Josef Ressel Centre for Intelligent & Secure Industrial Automation

The Josef Ressel Centre for Intelligent and Secure Industrial Automation investigates the fundamentals of digital assistants for industrial machines that enable intelligent and secure operation.

Cyera

Cyera

Cyera is the data security company that gives businesses context and control over their most valuable asset: data.

VMware

VMware

VMware is a leading provider of multi-cloud services for all apps, enabling digital innovation with enterprise control.