Skip to main content
Canada’s most-awarded newsroom for a reason
Enjoy unlimited digital access
$1.99
per week
for 24 weeks
Canada’s most-awarded newsroom for a reason
$1.99
per week
for 24 weeks
// //

U.S. drugmaker Pfizer and its German partner BioNTech said on Wednesday that documents related to development of their COVID-19 vaccine had been “unlawfully accessed” in a cyberattack on Europe’s medicines regulator.

The European Medicines Agency (EMA), which assesses medicines and vaccines for the European Union, said hours earlier it had been targeted in a cyberattack. It gave no further details.

Pfizer and BioNTech said they did not believe any personal data of trial participants had been compromised and EMA “has assured us that the cyber attack will have no impact on the timeline for its review.”

Story continues below advertisement

It was not immediately clear when or how the attack took place, who was responsible or what other information may have been compromised.

The two companies said they had been informed by the EMA “that the agency has been subject to a cyber attack and that some documents relating to the regulatory submission for Pfizer and BioNTech’s COVID-19 vaccine candidate” had been viewed.

Such documents could be extremely valuable to other countries and companies rushing to develop vaccines, experts said.

“When it comes to the data submitted to these kinds of regulatory bodies, we are talking confidential information about the vaccine and its mechanism of action, its efficiency, its risks & known possible side effects and any unique aspects such as handling guidelines,” said Marc Rogers, founder of a volunteer group fighting Covid-related breaches, CTI-League.

“It also provides detailed information on other parties involved in the supply and distribution of the vaccine and potentially significantly increases the attack surface for the vaccine,” adding more ways the formulas or production could be hacked or stolen.

The companies said “no BioNTech or Pfizer systems have been breached in connection with this incident and we are unaware that any study participants have been identified through the data being accessed.”

A spokeswoman for BioNTech declined further comment. Pfizer did not respond to a request for further comment.

Story continues below advertisement

The Pfizer-BioNTech vaccine is a top contender in the global race to beat back COVID-19. It is already being administered in Britain.

The EMA has said it would complete its review by Dec. 29, although its schedule may change.

The EMA statement gave few details about the attack, saying only it was investigating with help from law enforcement.

“EMA cannot provide additional details whilst the investigation is ongoing,” it said in a statement.

U.S. law enforcement and cybersecurity officials did not respond to requests for comment.

Hacking attempts against healthcare and medical organizations have intensified during the COVID-19 pandemic as attackers ranging from state-backed spies to cyber criminals hunt for information.

Story continues below advertisement

Reuters has previously reported on allegations that hackers linked to North Korea, South Korea, Iran, Vietnam, China and Russia have on separate occasions tried to steal information about the virus and potential treatments.

Reuters has documented that espionage campaigns targeted a slew of pharmaceutical and vaccine development companies including Gilead, Johnson & Johnson, Novavax, and Moderna. Regulators and international organizations such as the World Health Organization have also come under repeated attack.

“Vaccine candidates represent liquid gold to many parties, both in terms of the opportunity and the pure market value,” said Rogers, who is also vice president at security company Okta Inc. “Information on the vaccine and access to any link in the distribution chain has significantly increased value.”

The respiratory virus, which emerged in China in late 2019, has infected more than 68 million people worldwide, according to a Reuters tally. More than 1.5 million people have died.

Be smart with your money. Get the latest investing insights delivered right to your inbox three times a week, with the Globe Investor newsletter. Sign up today.

Your Globe

Build your personal news feed

  1. Follow topics and authors relevant to your reading interests.
  2. Check your Following feed daily, and never miss an article. Access your Following feed from your account menu at the top right corner of every page.

Follow topics related to this article:

View more suggestions in Following Read more about following topics and authors
Report an error
Tickers mentioned in this story
Due to technical reasons, we have temporarily removed commenting from our articles. We hope to have this fixed soon. Thank you for your patience. If you are looking to give feedback on our new site, please send it along to feedback@globeandmail.com. If you want to write a letter to the editor, please forward to letters@globeandmail.com.

Welcome to The Globe and Mail’s comment community. This is a space where subscribers can engage with each other and Globe staff. Non-subscribers can read and sort comments but will not be able to engage with them in any way. Click here to subscribe.

If you would like to write a letter to the editor, please forward it to letters@globeandmail.com. Readers can also interact with The Globe on Facebook and Twitter .

Welcome to The Globe and Mail’s comment community. This is a space where subscribers can engage with each other and Globe staff. Non-subscribers can read and sort comments but will not be able to engage with them in any way. Click here to subscribe.

If you would like to write a letter to the editor, please forward it to letters@globeandmail.com. Readers can also interact with The Globe on Facebook and Twitter .

Welcome to The Globe and Mail’s comment community. This is a space where subscribers can engage with each other and Globe staff.

We aim to create a safe and valuable space for discussion and debate. That means:

  • Treat others as you wish to be treated
  • Criticize ideas, not people
  • Stay on topic
  • Avoid the use of toxic and offensive language
  • Flag bad behaviour

If you do not see your comment posted immediately, it is being reviewed by the moderation team and may appear shortly, generally within an hour.

We aim to have all comments reviewed in a timely manner.

Comments that violate our community guidelines will not be posted.

UPDATED: Read our community guidelines here

Discussion loading ...

To view this site properly, enable cookies in your browser. Read our privacy policy to learn more.
How to enable cookies