Cyber Incident Victim: Drogarias Globo
Date:
May 2025
Location:
Brazil
Summary
Drogarias Globo reported a cyberattack that led to operational instabilities across its systems, prompting immediate containment efforts by its security team. The incident also affected Nazária Distribuidora Farmacêutica, another entity within the Grupo Jorge Batista, with both organizations stating that security protocols were reinforced and their information security units are working intensively to restore normal service. While neither notice disclosed the attack’s nature, whether internal data were compromised, or if the two events share a common origin, they emphasized transparency and ongoing efforts to protect data and resume full operations. The Grupo Jorge Batista itself has not issued a separate statement on the matter.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On May 12, 2025, Drogarias Globo and Nazária Distribuidora Farmacêutica, both linked to the Grupo Jorge Batista pharmacy sector, disclosed that they had been victims of a cyber attack. The organizations stated in their notes that the attack caused operational instabilities in their systems. Neither note provided details about the attack’s nature, whether internal data were compromised, or if the two incidents shared a common origin. Both organizations said the source of the instability was identified immediately after detection.
Following identification, Nazária Distribuidora said its technical team acted with maximum priority on containment and resolution, adopting all necessary security measures to protect data and fully restore services. Drogarias Globo’s note indicated that all security protocols were reinforced and its Information Security team was acting intensively to normalize services. The companies emphasized they were working to return to normal operation as quickly as possible. Grupo Jorge Batista, which manages the two entities, had not issued a public statement at the time of the notes, and Security Report had contacted the group to obtain further information on the extent and impact of the attack.
The Security Report also published the full texts of the notes issued by Nazária Distribuidora and Drogarias Globo. Separately, the pharmaceutical sector had recently experienced another cyber incident at the Instituto de Pesquisa Nuclear, where a hacker attack forced the paralysis of production and supply of radiopharmaceuticals, with normal output resuming only after a week. This separate event was mentioned in the same article as contextual information about recent cyber threats affecting the sector.