Inotiv, Inc.
bd_be2ba2005cc77e2a · schema v1 · pii pii-v1
Full breach record for Inotiv, Inc. →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Qilin on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
Inotiv, Inc. is a publicly USA traded contract research organization (CRO) that provides nonclinical and analytical drug discovery and development services to the pharmaceutical and medical device industries.As a leading contract research org ...
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Aug 8, 2025
Claim posted
—
Corroborated · see linked filings
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- Nebraska State AGbd_1787a30044a975922025-12-02 · +116dVerified by operator
- New Hampshire State AGbd_44e1e024dc1bcc1c2025-12-02 · +116dVerified
- California State AGbd_62110b9d0e035dd62025-12-02 · +116dVerified
- Massachusetts State AGbd_a3d617a135433fef2025-12-03 · +117dVerified
Show 6 more filings ↓Show fewer ↑up to 143d gap
- Vermont State AGbd_c1146c807292b96b2025-12-22 · +136dVerified
- Nebraska State AGbd_9fdb1f68fc6a3e022025-12-23 · +137dVerified by operator
- Maine State AGbd_d8edef04448918b22025-12-23 · +137dVerified
- New Hampshire State AGbd_ee3cf19cee0796322025-12-23 · +137dVerified
- California State AGbd_eff7143c236edf7c2025-12-23 · +137dVerified
- Texas State AGbd_8e132b89047d54ee2025-12-29 · +143dCandidate
Showing first 10 of 15 linked disclosures.
Filing propagation · 11 filings · 7 states
View merged incident ↗Pattern: first filing Aug 8, last Dec 29 (TX) — a 143-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Cascade drawn from the first 10 linked disclosures of 15 — the full spread may be wider.
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
qilin
According to ransomware.live, Qilin ransomware was first observed in July of 2022. Qilin Ransomware is written in Golang and supports multiple encryption modes; all of which are controlled by the operator. Qilin actors practice double extortion – demanding payment for a decryptor, as well as for the non-release of stolen data.