Back to all incidents

bayer

bayer.com
CONFIRMED

bayer was listed on the Black X ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Observable Status CONFIRMED
Industry / Sector Healthcare
Incident Classification Network Intrusion & Data Exfiltration
Attributed Threat Actor Black X
Affected Population 2,060 records
First Seen 2024-05-20
Last Updated 2026-10-09
Authentication Credentials
OPEN WEIGHTS TELEMETRY • DETERMINISTIC CONFIDENCE

Confidence & Source Corroboration

100% CONFIDENCE
1. Primary Authority CONFIRMED BY REGULATOR Base weight: 65%
2. Evidence Specificity +23% Statutory Filing Verified
3. Corroboration Curve +12% 2 independent domains
4. Timeline & Staleness +0% 2 milestones logged
Corroborated Source Domains:
ransomware.live agportal-s3bucket.s3.amazonaws.com
STATUTORY REGULATORY DISCLOSURES

Official Regulatory Filings & Legal Compliance Records

1 Verified Statutory Filing
Regulatory Ground Truth Standard: The disclosures below represent formal statutory filings and enforcement records submitted to government regulatory authorities (SEC, State Attorneys General, HHS OCR, FTC, FCC, EU/UK DPAs). In accordance with repository principles, this data is captured exactly as filed by the reporting entity and is never modified, overridden, or synthesized by AI models.
Washington Attorney General

RCW 19.255 Data Breach Notice

CONFIRMED BY REGULATOR
Docket / Accession ID Statutory Public Notice
Statutory Filing Date 2024-05-20
Disclosed Impact 2,060 records
Evidence Standard Regulatory Ground Truth
Statutory Filing Details & Summary (Preserved As Filed):

Official statutory data breach notification submitted by Bayer to the Washington State Office of the Attorney General pursuant to RCW 19.255.010, disclosing unauthorized system access impacting 2,060 residents.

View Official Regulatory Filing Document https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM17399.pdf

Technical Forensic Briefing

Incident Overview

bayer, operating within the Healthcare sector, has been subject to a cybersecurity incident initially observed on 2026-10-09. Ground-truth telemetry indicates the threat activity is attributed to threat actor Black X.

bayer was listed on the Black X ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Compromised Assets & Data Scope

The specific volume of affected customer or organizational records remains under active forensic investigation. Primary affected online infrastructure and perimeter domains include bayer.com.

Specific classes of compromised records, credentials, or proprietary information continue to be audited through ongoing forensic investigation.

Authoritative Directives & Vendor Disclosures

  • Continuous Telemetry Monitoring: Formal statutory regulatory filings (SEC Form 8-K, State AG portals) and sovereign agency advisories (CISA, NCSC) are continuously monitored via automated ingestion pipeline.

Milestone Timeline (2 events logged)

2026-10-09 19:14 UTC
UNVERIFIED CLAIM

bayer Listed on Black X Ransomware Extortion Portal

2024-05-20 16:30 UTC
CONFIRMED BY REGULATOR

Washington State Attorney General Breach Notice (RCW 19.255)

Have updated information or a new verifiable source?

This incident record is a flat Markdown file tracked in Git. Propose an update or add a milestone via Pull Request.

Propose Update via GitHub