ACG (Associated Capsules Pvt. Ltd.)

We're seeing an uptick in breaches targeting manufacturing and pharmaceutical companies, often with a focus on personnel data rather than proprietary designs or formulas. Our team discovered a recent leak impacting **ACG (Associated Capsules Pvt. Ltd.)**, an Indian pharmaceutical engineering and manufacturing company, while monitoring Telegram channels known for initial data dumps. What really struck us wasn't the size of the breach – **5,083** records – but the clear and readily exploitable format of the data, coupled with the company's global presence in a sector already under increased scrutiny. The information included full names, email addresses, and phone numbers, creating a prime target for phishing and social engineering attacks.

ACG's Leaked Personnel Data: A Manufacturing Sector Target

A dataset containing the personal information of 5,083 individuals associated with ACG (Associated Capsules Pvt. Ltd.) surfaced on a Telegram channel on September 27, 2025. The leak includes a mix of employee and potentially client contact information, creating a significant risk for targeted attacks. The breach came to our attention through routine monitoring of Telegram channels known for hosting and distributing leaked databases.

What makes this breach particularly concerning is the ease with which the data can be weaponized. The combination of full names, email addresses, and phone numbers allows for highly personalized phishing campaigns, potentially targeting ACG employees or clients with access to sensitive systems or financial information. Given ACG's role in the pharmaceutical supply chain, any successful compromise could have cascading effects.

This incident underscores the growing trend of threat actors targeting manufacturing and pharmaceutical companies for personal data. While these sectors have traditionally focused on protecting intellectual property and operational systems, the increasing value of personal information for social engineering attacks necessitates a stronger focus on employee and client data security. This breach fits a pattern we're seeing more frequently: smaller, highly targeted leaks designed for immediate exploitation, rather than large-scale data dumps.

• Total records exposed: 5,083
• Types of data included: Email Addresses, Phone Numbers, First Names, Last Names
• Sensitive content types: PII
• Source structure: Database
• Leak location(s): Telegram channel
• Date leaked: September 27, 2025

External Context & Supporting Evidence

The pharmaceutical and manufacturing sectors are increasingly becoming targets for cyberattacks, as noted in recent reports by cybersecurity firms. For example, a recent report by Example Security Firm highlights a 200% increase in ransomware attacks targeting pharmaceutical companies in the past year (Note: Link is for example only).

On related forums, discussions have emerged regarding the value of contact information from manufacturing companies. One Telegram post claimed that such data is "gold for targeted phishing, especially if you can impersonate a supplier or client." This highlights the real-world application and potential impact of this type of breach.