On July 14, 2026, the Chaos ransomware group listed Aphena Pharma Solutions on its leak site, claiming to have gained full access to the company's infrastructure. The group stated that 142 GB of critical corporate data was stolen.
The stolen data includes financial statements such as capital expenditures, fixed assets, accounts receivable, and accounts payable. It remains unclear if any personal data, such as customer records, employee personal information, or patient health data, was compromised, as the ransomware group's disclosure does not specify these types. The number of affected individuals has not been quantified.
As of July 15, 2026, no official breach notification letters, regulatory filings, or legal actions have been reported. Details regarding affected individuals, specific states impacted, and the full scope of data exposure are currently unknown and may emerge as further investigation by Aphena Pharma Solutions progresses.