Ransomware.live listed Johnson & Johnson as a victim of the CRPxO group on 2026-07-31 and described the incident as a healthcare and pharmaceutical case with 1.9 GB of data leaked. The available source material does not include a company statement, regulator filing, or breach notice confirming the incident.
No confirmed individual count, state list, or data categories were provided in the source material. The listing does not identify whether the exposed files included Social Security numbers, medical information, or financial records.
This incident remains reported only from the ransomware tracker entry. Additional details may emerge later from company filings, regulator notices, or legal records.