Astrazeneca Breach

AstraZeneca was listed by a group using the LAPSUS$ name in a March 2026 sales post advertising roughly 3GB of alleged company data, including employee-related records, source code, cloud configuration files, and access credentials. Hackread, which reviewed sample files, reported that the material appeared to include GitHub Enterprise-style user data, contractor or third-party access records, and some generic financial data. DataBreach.com’s own parse found roughly 165,000 email addresses, 174,000 names, and 574 phone numbers, with most of the email addresses tied to AstraZeneca domains, indicating the leak primarily involved AstraZeneca-linked accounts rather than a broad mix of outside contacts.