Pharmgeocom (Фармгеоком)

We noticed a significant data leak surfacing on a prominent Telegram channel on February 9th, 2025, originating from a Russian entity identified as Pharmgeocom (Фармгеоком). This organization, a key supplier and online retailer for dental and medical products within Russia, experienced a breach impacting a substantial user base. What struck us was the inclusion of not just PII, but also password hashes, which significantly elevates the risk profile for affected individuals and the organization itself. The dataset's relatively contained size, at 9,302 records, belies the potential impact given the sensitive nature of the compromised information.

The breach, identified as a database compromise, involved the exfiltration of 9,302 user records. The leaked data encompasses a range of personally identifiable information (PII) including email addresses, phone numbers, first and last names, and crucially, MD5 password hashes. The presence of MD5 hashes, while not ideal for modern security standards, still presents a considerable risk, especially when combined with other readily available personal identifiers. The source structure of the leak points to a direct database dump, suggesting a potential vulnerability in the organization's data storage or access controls. The data was disseminated via a Telegram channel, a common vector for the initial public release of compromised datasets.

While specific news coverage directly linking Pharmgeocom to this leak at the time of discovery was limited, the nature of the leak and the platform of dissemination are consistent with patterns observed in previous breaches affecting e-commerce and healthcare-adjacent entities in the region. OSINT investigations into Pharmgeocom confirm its role as a significant supplier of medical and dental goods, operating both as a distributor and an online storefront. The inclusion of geographic location data within the leaked records further underscores the potential for targeted social engineering or phishing attacks against the affected user base.