Marinomed Biotech AG

Summary

Marinomed Biotech AG, a pharmaceutical firm based in Korneuburg, Lower Austria, was victim of a cybercrime that led to an unauthorized transfer of roughly EUR 677,000 to parties outside the European Economic Area. The company has filed criminal charges, engaged external advisors to investigate, and is assessing whether its insurance policies will cover the loss; attempts to reverse or block the transaction have so far been unsuccessful. Despite the incident, the management board states that the company's liquidity remains secured.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Marinomed Biotech AG, a pharmaceutical company headquartered in Korneuburg, Lower Austria, disclosed on April 1, 2025 that it had become the victim of a cybercrime incident. The disclosure was made in a press release reported by the Kurier newspaper, which noted that the firm is based in the northeastern part of Austria. A subsequent ad‑hoc announcement published on the company’s own website on April 2, 2025 reiterated the same information. Both sources describe the event as a cyberattack that led to an unauthorized transfer of funds.

According to the announcements, the illicit transfer amounted to approximately EUR 677,000 and was sent to third parties located outside the European Economic Area. The company stated that, despite immediate efforts, it has not been able to reverse the transaction or to block the transferred funds at the recipient bank. The inability to recover the money was highlighted in both the Kurier report and the company’s ad‑hoc notice. The sources do not provide further detail on the mechanisms used to move the funds.

In response to the incident, Marinomed Biotech AG filed criminal charges with the relevant investigating authorities, as noted in both articles. The company also engaged external advisors to assist in fully clarifying the circumstances surrounding the cybercrime. Additionally, it began reviewing its existing insurance policies to determine whether any potential damages could be covered under those policies. These steps were described as part of the firm’s effort to address the financial and legal consequences of the attack.

Despite the financial loss, the company’s Management Board stated at the time of the announcements that Marinomed Biotech AG’s liquidity remains secured. The Kurier article quoted the board as saying the société is liquide, and the ad‑hoc announcement echoed that assessment. No further information about ongoing operations or future impacts was provided in the available sources.

Sources

Sources available to members: 2 sources.