UnknownHealthcareHealthcareCustomer Data InvolvedGovernment IDIdentity (basic)MediumActive

GLENMARK PHARMACEUTICALS INC., USA

bd_2d1f268d9ae7eea5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 27, 2026

Filed

Mar 27, 2026

To disclose

28 days

Affected

Not disclosed

Confidence

66%

Full breach record for GLENMARK PHARMACEUTICALS INC., USA →2 incidents on file

Glenmark Pharmaceuticals Inc., USA notified individuals of a security incident after receiving an extortion email on February 27, 2026, claiming possession of company records. The investigation identified documents containing government-issued identification numbers. The company engaged external cybersecurity professionals and law enforcement. Two years of identity protection services are being offered. The investigation is ongoing.

J jump to incidentP pin to compareR raw source

Massachusetts clock✓ MA AG ≤30d28 days discovery → filing

Incident timeline

discovery → filing · 28 days

Feb 27, 2026

Discovered

Mar 27, 2026

Filed

vs. sector median

8 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: GLENMARK PHARMACEUTICALS INC., USA
norm: glenmark pharmaceuticals inc usa
Domain: glenmarkpharma-us.com

Name: GLENMARK PHARMACEUTICALS INC., USA
norm: glenmark pharmaceuticals inc usa
Domain: glenmarkpharma-us.com
Industry: Healthcarellm

Discovered: Feb 27, 2026
Materiality determined: —
Notification sent: Mar 17, 2026
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)
Attack vector: Unknown
Threat actor: External

During the incident: Commenced an investigation with the help of external cybersecurity professionals
Reported this matter to law enforcement
Changes made: Offering two years of identity protection services through TransUnion at no cost
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: MA AG ≤30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-477-glenmark-pharmaceuticals-inc-usa/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 27, 2026
Raw hash: 8f07835792736788e17e13f652b7494c188d51d96c6a04d4cb730e9546e4233e

Reporting entityGLENMARK PHARMACEUTICALS INC., USA

Victim entityGLENMARK PHARMACEUTICALS INC., USA

Incidentdiscovered Feb 27, 2026

Stated responseCommenced an investigation with the help of external cybersecurity professionals

ComplianceMA AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov