Inotiv, a contract research organization (CRO), disclosed that a threat actor accessed some company systems and encrypted certain systems on August 8, 2025. The incident disrupted access to portions of its networks, internal storage and business applications. Inotiv’s August 18 filing did not identify the attacker, name malware, confirm data theft or disclose a ransom demand or payment.
News coverage has called the event ransomware because encryption and operational disruption are typical of ransomware. That label should be attributed, however: Inotiv’s own filing described a cybersecurity incident involving unauthorized access and encryption, not a named ransomware operation.
What Inotiv disclosed about the attack
Inotiv reported the incident in a Form 8-K filed August 18, 2025, after discovering it on August 8. The company said a threat actor gained unauthorized access to certain systems and encrypted some of them. It restricted access, began containment and remediation, hired outside cybersecurity specialists and notified law enforcement. The filing also said Inotiv activated business-continuity measures, including offline alternatives.
The company did not say that every facility or research program stopped. Its wording supports a disruption to certain operations and systems, not a complete shutdown of animal-care or research activity. The initial filing said the full scope, restoration timetable and operational and financial effects were not yet known.
#1 Best Overall
- Entry-level NAS Personal Storage：UGREEN NAS DH2300 is your first and best NAS made easy. It is designed for beginners who want a simple, private way to store videos, photos and personal files, which is intuitive for users moving from cloud storage or external drives and move away from scattered date across devices. This entry-level NAS 2-bay perfect for personal entertainment, photo storage, and easy data backup (doesn't support Docker or virtual machines).
- Set Your Devices Free, Expand Your Digital World: This unified storage hub supports massive capacity up to 64TB.*Storage drives not included. Stop Deleting, Start Storing. You can store 22 million 3MB images, or 2 million 30MB songs, or 43K 1.5GB movies or 67 million 1MB documents! UGREEN NAS is a better way to free up storage across all your devices such as phones, computers, tablets and also does automatic backups across devices regardless of the operating system—Window, iOS, Android or macOS.
- The Smarter Long-term Way to Store: Unlike cloud storage with recurring monthly fees, a UGREEN NAS enclosure requires only a one-time purchase for long-term use. For example, you only need to pay $459.98 for a NAS, while for cloud storage, you need to pay $719.88 per year, $2,159.64 for 3 years, $3,599.40 for 5 years. You will save $6,738.82 over 10 years with UGREEN NAS! *NAS cost based on DH2300 + 12TB HDD; cloud cost based on 12TB plan (e.g. $59.99/month).
- Blazing Speed, Minimal Power: Equipped with a high-performance processor, 1GbE port, and 4GB RAM on Board, this NAS handles multiple tasks with ease. File transfers reach up to 125MB/s—a 1GB file takes only 8 seconds. Don't let slow clouds hold you back; they often need over 100 seconds for the same task. The difference is clear.
- Let AI Better Organize Your Memories: UGREEN NAS uses AI to tag faces, locations, texts, and objects—so you can effortlessly find any photo by searching for who or what's in it in seconds. It also automatically finds and deletes similar or duplicate photo, backs up live photos and allows you to share them with your friends or family with just one tap. Everything stays effortlessly organized, powered by intelligent tagging and recognition.
Read Inotiv’s August 2025 SEC filing.
Why reports call it ransomware
Encryption of company systems after unauthorized access is a common ransomware pattern, which is why outlets including TechRadar described the incident as a ransomware attack. But the public Inotiv disclosure did not provide several details normally used to identify a ransomware campaign:
- the threat actor or criminal group;
- the ransomware family or malware name;
- the initial access route;
- whether files were copied before encryption;
- whether a ransom was demanded or paid; or
- the amount of any ransom.
Accordingly, “ransomware attack” is a reasonable attributed description, while “Inotiv confirmed that [named group] deployed [named malware]” would go beyond the cited record. TechRadar’s report supplies the ransomware characterization; Inotiv’s SEC filing remains the primary account of what the company confirmed.
What systems and work were affected?
Inotiv said availability of and access to portions of its networks, internal data storage, certain internal business applications and other systems supporting business operations were temporarily affected. It continued restoration while using offline processes to limit disruption. The filing does not establish that animal studies, laboratory services or deliveries ceased across the company.
Recovery status after the initial disclosure
In a subsequent filing, Inotiv said it had restored availability and access to most of its networks and systems. Additional restoration work and investigation continued, and the company said it was still accepting and executing requests for products and services.
Rank #2
- 【Advanced Home Data & Media Hub】For advanced home users who need phone backup, file storage, and centralized data management. Centralize family photos, 4K videos, movies, computer backups, and personal files in one place while running multiple apps for home entertainment and everyday data management. Suitable for households with growing digital libraries and multiple NAS use cases.
- 【Built for Creators, Media Servers & Advanced Apps】Powered by the Intel N100 Quad-Core CPU, 8GB DDR5 RAM, 2.5GbE networking, and dual M.2 NVMe slots, DXP2800 handles large files and heavier workloads with ease. Run Docker, virtual machines, and media server applications compatible with Plex—ideal for content creators, tech enthusiasts, and advanced home users managing 4K videos, RAW photos, personal media libraries, and multiple NAS apps.
- 【Up to 80TB for Growing Digital Libraries】 Supports up to 80TB of storage using two HDD bays and two M.2 NVMe SSD slots for family photos, movies, RAW photos, 4K videos, work files, and device backups. AI photo management supports recognition of people, objects, scenes, and locations, album organization, and duplicate photo detection. HDDs and SSDs are not included.
- 【AI-powered Home Surveillance】Turn DXP2800 into a centralized home surveillance hub by connecting compatible network cameras and storing recordings locally on your NAS. AI-powered features include Face Recognition, People Detection, and Pet Detection, helping advanced home users review important events more efficiently while managing home surveillance and personal data in one place.
- 【One data Center Across Your Devices】Keep files from desktops, laptops, phones, tablets, and other devices together instead of scattered across cloud accounts and external drives. Access, back up, organize, and share data across Windows, macOS, Android, iOS, web browsers, and compatible smart TVs—ideal for creators and advanced home users working across multiple devices.
“Most systems restored” is not the same as a fully closed incident. Inotiv said it still had not determined the investigation’s full scope, nature or operational and financial impact, and had not concluded whether the event was reasonably likely to have a material effect on the company.
See the subsequent SEC update.
Could personal information have been exposed?
Later SEC disclosures said three putative class actions alleged that personally identifying information and protected health information may have been affected by the 2025 Cybersecurity Incident. The complaints sought damages and injunctive relief and were later consolidated.
Those are litigation allegations, not a final finding about the breach. The cited filings do not establish how many people were affected, whether data was actually exfiltrated, whether anyone misused it or what regulators ultimately concluded. It is therefore inaccurate to state that Inotiv confirmed that medical records were stolen.
Inotiv’s 2025 Form 10-K describes the company and discusses the later cybersecurity-related litigation: SEC Form 10-K.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Rank #3
- Your Personal Streaming Server - Build your own Netflix-style media library and stream 4K movies, shows and photos to any device without monthly fees
- Create Your Own Cloud - Store your entire photo, video and music collection; access from anywhere with fast 282 MB/s transfer speeds
- Creator-Grade Backup Solution - Protect your irreplaceable content with automated backups to cloud services, external drives and remote NAS
- Multi-Layered Data Protection - Combine RAID redundancy, automated backups and snapshot technology to prevent data loss from any cause
- Smart Home Surveillance - Support up to 30 IP cameras with AI detection, instant alerts and secure remote monitoring
The separate Envigo animal-welfare and pollution case
The cyber incident was separate from a federal criminal resolution involving Inotiv’s Envigo subsidiaries. The Justice Department announced that resolution on June 3, 2024—not “last year” relative to August 2026.
Envigo RMS pleaded guilty to conspiring to knowingly violate the Animal Welfare Act. Envigo Global Services pleaded guilty to conspiring to knowingly violate the Clean Water Act. The conduct concerned a Cumberland County, Virginia, facility that bred, exported and sold dogs for research. Federal officials secured the surrender of more than 4,000 beagles in 2022.
Inotiv, the parent company, agreed to guarantee more than $35 million in payments, accept enhanced animal-care obligations and operate under a compliance monitor. The DOJ called it the largest-ever fine in an Animal Welfare Act case. The formal descriptions are the Animal Welfare Act and Clean Water Act violations and the guilty pleas; “animal cruelty” is shorthand, not the legal title of the offenses.
DOJ case page and DOJ announcement.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What the $35 million figure actually includes
The headline figure describes the broader federal resolution and payment guarantee, not a single $35 million criminal fine imposed on Inotiv. The plea agreement specifies $22 million in criminal fines—$11 million on each of two counts—plus additional payments and obligations.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #4
- Complete Phone & Computer Backup - Automatically protect photos, documents and videos from iPhone android, Mac and Windows to one secure location
- Your Private File Cloud - Access files from anywhere and share large projects with family or clients without relying on expensive cloud subscriptions
- Smart Home Security Hub - Monitor your home 24/7 with AI-powered surveillance that detects people, vehicles and sends instant alerts
- 100% Data Ownership - Keep full control of your personal data with multi-platform access and no monthly subscription fees
- 2-Year Warranty - Reliable hardware backed by Synology's expert customer support team and ongoing software updates
| Item | Verified detail |
|---|---|
| Overall resolution | More than $35 million guaranteed; the resolution agreement states total disbursements would exceed $35.5 million. |
| Criminal fines | $22 million total, consisting of $11 million on each of two counts. |
| Scheduled fine payments | $5 million on June 3, 2025; $5 million on June 3, 2026; $5 million on June 3, 2027; and $7 million plus accrued interest on June 3, 2028. |
| Other commitments | Animal-care, environmental, compliance-monitoring and related obligations. |
Primary documents: the Inotiv resolution agreement and Envigo plea agreement.
How the two events are—and are not—connected
Both events involve the same corporate parent, but they occurred at different times and concern different conduct: the Envigo resolution was announced June 3, 2024, while Inotiv identified the cyber incident August 8, 2025 and disclosed it August 18, 2025.
The cited filings do not say the attack was retaliation for the animal-welfare case, arose from its compliance disputes or exploited weaknesses identified in that matter. Any such causal link would be speculation.
What remains unknown as of August 18, 2026
- who carried out the intrusion;
- which malware or ransomware family, if any, was used;
- whether data was exfiltrated before encryption;
- whether a ransom was demanded or paid;
- the date on which every system was fully restored;
- the incident’s total financial effect; and
- the final number of people whose information, if anyone’s, was affected.
Inotiv’s public disclosures support a confirmed cyber incident involving unauthorized access, encryption and operational disruption. They do not yet support a more specific claim about the attacker, ransom, data theft or a connection to the Envigo case.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
