Microbix Addresses Cybersecurity Incident

Executive Summary

• Microbix Biosystems disclosed a ransomware attack that resulted in the theft of commercially‑sensitive and employee data, though operations were not materially disrupted.
• The company recovered the affected server, kept all production, safety and communications systems online, and confirmed no impact on manufacturing or product delivery.
• Microbix reiterated its policy of not paying ransoms and outlined ongoing cybersecurity enhancements, including CIS framework adoption, employee training, endpoint protection, redundant backups, and disaster‑recovery planning.

Key Details

• Incident Overview: An international hacker group penetrated a corporate server with ransomware; the server was recovered without material operational disruption.
• Data Compromise: At least some data stored on the server—including commercially‑sensitive information and employee personal data—was copied externally by the attackers.
• Operational Impact: File storage systems were temporarily offline, but no production, safety, quality, or email communications systems were affected.
• Company Response:
• Immediate recovery of the compromised server and restoration of normal operations.
• No ransom will be paid; policy decision communicated to avoid incentivizing cybercrime.
• Ongoing cybersecurity upgrades: adoption of Center for Internet Security (CIS) frameworks, regular employee training, endpoint protection with real‑time threat monitoring, redundant offline backups, and enhanced disaster‑recovery/business‑continuity planning.
• CEO Statement: Cameron Groome emphasized regret over the incident, commitment to improving IT security, and appreciation for stakeholder understanding as cyber threats increase in frequency and sophistication.
• Forward‑Looking Statements: The release contains typical forward‑looking language regarding future cybersecurity initiatives, risk factors, and potential impacts on business performance.

Notable Quotes

“Microbix regrets any impacts of international cybercrime and is continuing to improve its IT security at all levels. We appreciate the understanding of all stakeholders as Microbix, like so many targeted companies, adapts to increasing frequency and sophistication of cyber threats.” – Cameron Groome, CEO & President

Materiality Assessment: Material – Negative (data breach involving sensitive commercial and employee information poses a material risk to the company’s reputation, regulatory compliance, and potential future liabilities).