Neopharm Labs Data Breach Impacts Current and Former Employees

Neopharm Labs Inc., a Canadian pharmaceutical analytical testing laboratory, disclosed a data breach stemming from a ransomware attack that affected the personal information of current and former employees.

The breach was disclosed to the Massachusetts Office of Consumer Affairs and Business Regulation on Sept. 30, 2026.

On July 15, 2026, Neopharm detected unauthorized activity affecting certain parts of its IT infrastructure. The activity was subsequently confirmed to be a ransomware attack. During the attack, data was exfiltrated and published online by an unauthorized threat actor.

Following the ransomware incident, a secondary exposure occurred when systems were brought back online. Certain human resources files were accessible internally without the usual access restrictions from Aug. 1 to Aug. 10, 2026.

The company stated that access was restricted on Aug. 10, 2026, but that it was unable to confirm whether any of those files were accessed during that period.

The types of information that may have been exposed included names, addresses, telephone numbers, email addresses, employment information (such as position, hire dates and employment status), compensation and payroll information (including T4 slips), banking and direct deposit information, social insurance numbers, social security numbers, other government identifiers, benefits information, medical or leave-related information, disciplinary or performance-related information, copies of or information from identity documents, financial account information, driver's license information and credit or debit card numbers.

Neopharm Labs' response to the breach

Neopharm is offering affected employees a 24-month subscription to myTrueIdentity through TransUnion of Canada Inc. at no cost.

Affected individuals can enroll at www.mytrueidentity.ca using the activation code provided in their notification letters. The activation code must be redeemed by Jan. 31, 2027. For technical difficulties during enrollment, individuals can contact TransUnion Canada at 1-888-228-4939.

For questions about the incident or to obtain more specific information about their personal situation, affected individuals can contact Neopharm's human resources team by emailing rh@neoparmlabs.com.