Cyber Incident Victim: European Medicines Agency
Date:
Dec 2020
Location:
Netherlands
Summary
A European Union regulatory agency responsible for evaluating COVID-19 vaccines suffered unauthorized access to confidential Pfizer/BioNTech vaccine data, which threat actors subsequently altered before leaking publicly. The attackers deliberately manipulated the stolen documents to erode public confidence in vaccine safety and integrity, exploiting the agency's pivotal role in medicine approval across the EU. This incident combined data theft with disinformation tactics aimed at undermining vaccination efforts during the pandemic.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 3 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On December 9, 2020, the European Medicines Agency (EMA) disclosed a cybersecurity incident involving unauthorized access to data related to the Pfizer/BioNTech COVID-19 vaccine candidate. Threat actors stole confidential information and subsequently altered portions of the data before leaking it online. The EMA, responsible for evaluating and approving medicines within the European Union, confirmed the breach but did not specify the exact date of the initial intrusion or the methods used by the attackers. The altered documents were intentionally manipulated to misrepresent vaccine-related information, with the explicit goal of eroding public confidence in COVID-19 vaccines. This incident occurred during a critical period of global vaccine development and regulatory review, amplifying concerns about the security of sensitive health data.
The primary impact of the breach centered on attempts to disrupt public trust in vaccine safety and regulatory processes. By selectively modifying and releasing stolen Pfizer/BioNTech data, the threat actors sought to create confusion and amplify vaccine hesitancy amid the pandemic. The EMA did not detail the scope of the data exfiltration or identify affected internal systems in its public statement. No evidence suggested that the data manipulation impacted the EMA's regulatory review timelines or the eventual authorization of the Pfizer/BioNTech vaccine. The agency emphasized the integrity of its evaluation procedures despite the breach but did not disclose specific remediation measures taken in response to the incident. The leak highlighted vulnerabilities in protecting high-stakes pharmaceutical data during global health emergencies.