Hackers Steal Pfizer-BioNTech COVID-19 Vaccine Data in Europe

TEMPO.CO, London - U.S. drugmaker Pfizer and its German partner BioNTech said on Wednesday, Dec. 10, that documents related to the development of their COVID-19 vaccine had been “unlawfully accessed” in a cyberattack on Europe’s medicines regulator.

The European Medicines Agency (EMA), which assesses medicines and vaccines for the European Union, said hours earlier it had been targeted in a cyberattack. It gave no further details.

Pfizer and BioNTech said they did not believe any personal data of trial participants had been compromised and EMA “has assured us that the cyber attack will have no impact on the timeline for its review.”

It was not immediately clear when or how the attack took place, who was responsible, or what other information may have been compromised.

The two companies said they had been informed by the EMA “that the agency has been subject to a cyber attack and that some documents relating to the regulatory submission for Pfizer and BioNTech’s COVID-19 vaccine candidate” had been viewed.

Such documents could be extremely valuable to other countries and companies rushing to develop vaccines, experts said.

“When it comes to the data submitted to these kinds of regulatory bodies, we are talking confidential information about the vaccine and its mechanism of action, its efficiency, its risks & known possible side effects and any unique aspects such as handling guidelines,” said Marc Rogers, founder of a volunteer group fighting Covid-related breaches, CTI-League.

“It also provides detailed information on other parties involved in the supply and distribution of the vaccine and potentially significantly increases the attack surface for the vaccine,” adding more ways the formulas or production could be hacked or stolen.

The companies said, “no BioNTech or Pfizer systems have been breached in connection with this incident and we are unaware that any study participants have been identified through the data being accessed.”

A spokeswoman for BioNTech declined further comment. Pfizer did not respond to a request for further comment.

The Pfizer-BioNTech vaccine is a top contender in the global race to beat back COVID-19. It is already being administered in Britain.

The EMA has said it would complete its review by Dec. 29, although its schedule may change.

The EMA statement gave few details about the attack, saying only it was investigating with help from law enforcement.

“EMA cannot provide additional details whilst the investigation is ongoing,” it said in a statement.

U.S. law enforcement and cybersecurity officials did not respond to requests for comment.

Hacking attempts against healthcare and medical organizations have intensified during the COVID-19 pandemic as attackers ranging from state-backed spies to cybercriminals hunt for information.

Read: UK Warns People with Serious Allergies to Avoid Pfizer Vaccine

REUTERS