Inotiv Says Personal Information Stolen in Ransomware Attack

According to Inotiv, between approximately 5–8 August 2025 a threat actor gained unauthorised access to the company’s systems and may have acquired certain data, with personal, financial and health information belonging to 9,542 people affected. Hackers stole names, addresses, Social Security numbers, driver’s licence numbers, ID numbers, credit or debit card numbers, medical and health insurance information, and dates of birth, as disclosed to the Maine Attorney General’s Office and in filings with the US SEC.

The incident disrupted some business operations and restricted access to certain networks and systems, including internal data storage, while the firm later restored network access and closed its investigation. On 11 August the Qilin ransomware group added the company to its Tor-based site, claiming the theft of 176 gigabytes of data; the listing has since been removed.

Inotiv is offering 24 months of free credit monitoring and identity theft protection to affected individuals, and notes that the full operational and financial impact is still being assessed.