Biocorp has identified a security incident that affected its corporate website (biocorpsys.com) between August 22 and 24, 2026.
Some data transmitted via the contact form may have been accessed by an unauthorised third party. To learn more about the incident, its potential consequences and the measures taken, please click here.
Biocorp’s corporate website was hacked on August 22, 2026. The incident – which exploited a recent Wordpress vulnerability – was detected on August 24 at 10:22 a.m., and resolved the same day, at 2:55 p.m.
During this time, a hacker set up a fake ReCaptcha inviting Internet Biocorpsys website users to type a PowerShell command, on Windows. This command could have allowed the hacker to take control of the computer of any user who followed these instructions in full.
In addition, during these two days, the hacker was able to access the data transmitted by users through the contact form. In addition to the identity and contact details of the authors of the messages, they were able to read their content.
The risk of identity theft exists, but remains low given the data collected through the form and the inability to attach files to the contact form.
The impact therefore seems to be mainly a loss of confidentiality. It is limited to the data that you have voluntarily transmitted to Biocorp through the website.
In order to prevent this type of incident in the future, we have taken the following measures:
We remind you that neither Biocorp nor any other companies within the group will ever ask you to provide them by email, SMS or telephone, sensitive data, such as your bank details.
If you visited the Biocorp corporate website between August 22 and 24, we invite you to contact your IT department or a trusted individual with technical IT knowledge, to make sure that the hacker has not taken control of your computer. If necessary, we invite you to renew all your passwords.
The French Data Protection Authority, the Commission Nationale de l’Informatique et des Libertés (CNIL) was informed of the situation on August 27, 2026. Biocorp will file a complaint, so that an investigation and criminal prosecution can be initiated by the Public Prosecutor, if necessary.
We kindly ask you to accept our apologies for the inconvenience of this incident. Our teamsremain at your disposal to provide you with any further information. You can contact Biocorp at the following coordinates: privacy@biocorp.fr or Biocorp Production, ZI de Lavaur, La Béchade, 63500 Issoire, France.
Under the umbrella brand Mallya®, BIOCORP is developing a range of connected devices for injection pens, deployed in various therapeutic areas. Expanding the Mallya platform is a key priority.
Other avenues being explored include fertility and hemophilia, where innovative solutions are still greatly needed.
Beyond manufactured devices, BIOCORP invests in digital innovation, including a mobile app to support treatment adherence and monitoring.
The company also develops new connected objects to enrich the therapeutic ecosystem such as smart syringes or diagnostic tools.
BIOCORP’s production unit continues to meet custom requests from industrial partners. It leverages its tooling, molding, and plastic injection expertise to design and produce tailor-made solutions that meet industry standards and client expectations.