Ransomware victim disclosure
← All victimsR L Fine Chem Pvt. Ltd.
Claimed by GLOBAL SECRET · listed 2 days ago
Status timeline
- ListedSep 3, 2026
Current state: Listed for ransom
At a glance
- Group
- GLOBAL SECRET
- Status
- Listed for ransom
- Country
- India
- Listed on leak site
- Sep 3, 2026
- Data size
- 18.6 GB (14,155 Files, 2,840 Folders)
- Records
- 14155 files
About the victim
AI dossier — public-source company profileR L Fine Chem Pvt. Ltd. is a research-oriented pharmaceutical manufacturer headquartered in Bangalore, India, established in 1984. Operating one USFDA-approved manufacturing plant, the company specializes in psychotropic and CNS active pharmaceutical ingredients (APIs), serving over 600 customers across 80 countries with ~75% export volume. The company holds certifications from USFDA, PMDA, ANVISA, EDQM, and KFDA.
- Industry
- Pharmaceutical Manufacturing – Psychotropic & CNS Active Pharmaceutical Ingredients
- Address
- Bangalore, Karnataka, India
- Employees
- 500-1000
- Founded
- 1984
Attack summary
Severity: high — Confirmed exfiltration of significant data volume (18.6 GB) from a regulated pharmaceutical manufacturer with USFDA approval and global operations. Psychotropic/CNS drug manufacturing involves sensitive regulatory, formulation, and supply-chain data. Scale and sector indicate material business and compliance risk, though specific data category details are not disclosed in the post.GLOBAL SECRET claims to have exfiltrated 18.6 GB of data (14,155 files, 2,840 folders) from R L Fine Chem Pvt. Ltd. The post does not explicitly state whether encryption occurred or provide details of what specific data categories were compromised.
Data the group says was taken
AI dossier — extracted from the leak post- Business records
- Operational files
- Company documents
What the group claims
Established in 1984, R L Fine Chem Pvt. Ltd., headquartered in Bangalore, has emerged as one of India's rapidly growing research-oriented pharmaceutical companies. Operating with one USFDA-approved manufacturing plant, the company holds certifications from regulatory bodies such as USFDA, PMDA, ANVISA, EDQM, and KFDA, facilitating the export of over 75% of its Active Pharmaceutical Ingredients (APIs) globally. RLFC has earned the trust of more than 600 customers spanning 80 countries. Specializing in the production of Drug Substance segments like psychotropic and CNS.
The leak post
captured from the group's site# R L Fine Chem Pvt. Ltd. Country: BANGALORE, Karnataka, India | Website: rlfinechem.com | Revenue: $54.3 Million | Industry: Pharmaceutical Manufacturing | Employees: 500-1000 | Properties: 18.6 GB (14,155 Files, 2,840 Folders) Established in 1984, R L Fine Chem Pvt. Ltd., headquartered in Bangalore, has emerged as one of India's rapidly growing research-oriented pharmaceutical companies. Operating with one USFDA-approved manufacturing plant, the company holds certifications from regulatory bodies such as USFDA, PMDA, ANVISA, EDQM, and KFDA, facilitating the export of over 75% of its Active Pharmaceutical Ingredients (APIs) globally. RLFC has earned the trust of more than 600 customers spanning 80 countries across the United States, Europe, Latin America, the Middle East, Asia Pacific, Africa, and CIS markets. Specializing in the production of Drug Substance segments like psychotropic and CNS, the company has carved a niche in the market. The company's focus on manufacturing Antidepressants, Anxiolytics, Antiepileptic, Antipsychotic, Antihistaminic, Anticonvulsant, Antipsychotic, Antimalarial, Muscle Relaxant, Motion Sickness, Antispasmodic, and Hypnotic has established a global i…
Screenshot of the leak post
Sources
Source
Indexed 2 days agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
Is this your supplier? Your competitor? You?
Pro plans monitor your domain, corporate emails, and crypto wallets across every new ransomware leak-site post, breach dump and Telegram callout — alerts within 5 minutes.