CSIDB logo
Incident

Marinomed Biotech AG

Incident posture

Attack window
Apr 2025
Location
Austria
Status
Unknown
CIA posture
Available to members
Updated
2026-04-22 03:10

Linked entities

Victim
Marinomed Biotech AG
Threat actors
0 actors
Sources
2 sources

Timeline

Occurred
Apr 2025
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

Marinomed Biotech AG disclosedthat it fell victim to a cybercrime incident that resulted in an unauthorized transfer of approximately 677,000 euros to parties outside the European Economic Area. The company filed criminal charges with authorities, engaged external advisors to investigate the breach, and is assessing whether its insurance policies will cover the loss. Attempts to reverse the transaction or block the funds at the recipient bank have so far failed, while management states that liquidity remains unaffected.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

1 technique

Description

On April 1, 2025, Marinomed Biotech AG disclosed that it had fallen victim to a cybercrime incident. The company stated that the attack resulted in an unauthorized transfer of approximately EUR 677,000 to third parties located outside the European Economic Area. The disclosure was made via a press release and was also reported by local Austrian media on the same day. The funds were moved without the company's authorization, indicating a successful fraudulent transaction. No further technical details about the attack vector or compromised systems were provided in the statements. Following the discovery, Marinomed filed criminal charges with the relevant investigating authorities. The company engaged external advisors to assist in fully clarifying the circumstances surrounding the transfer. Marinomed also initiated a review of its insurance policies to determine whether any potential damages could be covered. Efforts to reverse the erroneous transfer or to block the funds at the recipient bank were undertaken but have so far been unsuccessful. These actions reflect the company's immediate response to mitigate the financial impact of the incident.

At the time of the announcement, Marinomed's Management Board indicated that the company's liquidity remained secured despite the outflow. The statement emphasized that the incident did not jeopardize the firm's ability to meet its short‑term obligations. No additional information was provided regarding potential operational disruptions or effects on ongoing research projects. The company committed to continue cooperating with authorities and advisors as the investigation proceeds.

Sources

Sources available to members: 2 sources.

CSIDB