Salama Pharmaceuticals listed by the The Gentlemen ransomware group

Overview

The Gentlemen ransomware group has listed Salama Pharmaceuticals Limited, a Tanzanian importer and distributor of pharmaceuticals and medical equipment, on its leak site. Headquartered in Dar es Salaam, the company operates a multi-warehouse distribution network serving healthcare facilities across the country. The listing dates from 31 July 2026.

What was published

The group claims to have exfiltrated corporate data from Salama's systems. As a distributor in the healthcare supply chain, the data is expected to include client and supplier records, purchase orders and financial documentation. The group has not disclosed the volume of data or published sample files at this stage.

Risks for affected individuals

• Healthcare facilities supplied by Salama could be exposed through business records.
• Financial data may enable payment fraud against the company.
• Sensitive commercial information could be used for further extortion.

What remains unknown

• The number of records exfiltrated.
• Whether patient data was involved.
• The status of negotiations between the group and the company.

What affected people should do

Partner institutions should verify the legitimacy of any communication claiming to come from Salama. The company should conduct a review of the compromised systems, notify business partners, and report the incident to Tanzanian authorities as required.