# MILLIMED CO., LTD. (มิลลิเมด) — DATA BREACH DISCLOSURE
**Date Added:** 2026-09-17
**Last Updated:** 2026-09-17
**Country:** Thailand 🇹🇭
**Industry:** Pharmaceutical Manufacturing & Distribution
**Website:** millimedthailand.com
**Revenue:** ~$70-85M USD (2.5-3.0 billion THB, group annual revenue)
**Data Volume:** **~3 TB** (databases, production records, email archives, factory documents, financial data)
—
## Overview
Millimed Co., Ltd. (บริษัท มิลลิเมด จำกัด) is a major Thai pharmaceutical manufacturer headquartered in Bangkok with GMP-certified production facilities in **Samut Prakan** and **Chiang Rai** provinces. The Millimed Group operates through **25+ subsidiary companies** spanning pharmaceutical manufacturing, consumer healthcare brands, supplements, real estate, agriculture, and hospitality.
Their consumer brand **i-HERB**, endorsed by Thai celebrity **Mario Maurer**, is one of the most recognized herbal healthcare brands in Thailand. The company holds **multiple Thai FDA quality awards** and manufactures prescription drugs, OTC products, sterile eye drops (BFS technology), and dietary supplements distributed nationwide through hospitals and pharmacies.
The group’s crown jewel subsidiary — **Millimed BFS** — reported **1,423 million THB revenue** and **593 million THB net profit** in 2025, with a staggering **41.7% net margin** and **65% year-over-year growth**. The parent company holds **942 million THB in retained earnings** — they can afford to resolve this.
Millimed’s management chose to ignore our communications and failed to protect their data. As a result, we are publishing details of the breach.
—
## What We Have — Over 3 Terabytes
We have obtained **complete access** to the Millimed Group’s entire IT infrastructure across **both factory locations and the Bangkok headquarters**. This includes production servers, file servers, NAS systems, ERP databases, email archives, and factory department shares. The total data volume exceeds **3 terabytes**.
### 💊 Pharmaceutical Manufacturing Data (CRITICAL)
– **Batch Manufacturing Records (BMR)** for **ALL pharmaceutical products** — the legal backbone of every drug they produce. We hold BMR distribution records from 2016 through August 2026, covering 18+ active product lines including i-HERB, Neoca, Denta Dente, Haelex, Leluxi, Amogin, and more
– **Quality Control & Calibration databases** — testing results, equipment calibration records, deviation reports
– **Drug Registration & Regulatory Affairs (RA)** data — complete product formulations for Amogin (4 variants), Chlovas, Caltab, BFS eye drops, Lidocaine HCl, Hilazin, Nicardipine, Cystaline-200, Nuosic, and more. **Master Formula documents** included
– **Bioequivalence Studies** (Bio Equalise subsidiary) — complete BE study reports, LC-MS/MS chromatography data, OECD compliance documents, and the contract with Chiang Mai University Faculty of Pharmacy
– **R&D Department** — pilot batch data, stability studies, cleaning validation, pharmaceutical excipient references (USP 38, BP 2013)
– **14 types of GMP audit records** — Thai FDA, Halal, GSDP, GPP, ISO 9001/14001/17025, Pfizer audit, TAISHO audit, iNova audit (including **CAR/PAR corrective action records**)
– **i-HERB brand complete IP** — all formulations, BMR, SOP, COA, specifications, cosmetic registrations, and production data for the Mario Maurer-endorsed brand
### 💰 Complete Financial Records (25+ Companies)
– **Audited financial statements** (งบการเงิน) for fiscal years **2024, 2025, and 2026** for all major subsidiaries:
– Millimed Co., Ltd. — 876M THB revenue, 54M THB net profit
– **Millimed BFS — 1,423M THB revenue, 593M THB net profit (41.7% margin!)**
– Pros Pharma, MLM Healthcare, Neoca Healthcare, Bio Equalise, i-Herb Innovation, Siriphanwa
– **K-Bank and EXIM Bank credit facility summaries** — full loan structures, credit lines, and covenant details
– **Monthly sales reports** (January 2025 — **August 2026**) — complete OTC and prescription drug revenue by product, region, sales channel, and individual sales unit
– **Oracle ERP database** — every financial transaction across the group. We also have the **Oracle ERP login credentials** (MMNEW/MMNEW@millimed.world)
– **Accounting databases** for **all 25+ entities** — complete general ledger, trial balances, tax reconciliation, intercompany transactions
– **28 entity accounting folders** with full Chart of Accounts, audit records, tax preparation documents
### 👤 Employee & HR Data (1,000+ People)
– **HRM8 database** — complete employee records: names, national ID numbers (เลขบัตรประชาชน), salaries, benefits, performance reviews
– **Organization charts** for all 7 production departments (PD1-PD7) with employee names
– **Payroll data** for all subsidiaries across three locations
– **FingerScan biometric data** backups
– **Personal data** of 1,000+ employees across Bangkok, Samut Prakan, and Chiang Rai
### 📧 Email Archives (30+ GB)
– **IT Administrator email archives** (15+ PST files) including:
– Network configuration and infrastructure credentials
– NAS Synology management alerts (neoca-office.synology.me, millimed-office.synology.me)
– Microsoft 365 administration
– VPN configuration and access management
– Vendor communications and support tickets
– Backup system notifications
### 🔑 60+ Credentials & Network Access
– **Thai Revenue Department (กรมสรรพากร)** login credentials for **ALL 25+ companies** — tax portal access for every entity in the group
– **BOI (Board of Investment)** portal credentials — 5 companies with tax incentive access
– **Department of Business Development (กรมพัฒนาธุรกิจการค้า)** — 5 corporate filing portal credentials
– **Dual VPN access** — WatchGuard Firebox at Ram Intra HQ (210.86.174.42) + **OpenVPN with full certificate chain and private key** for Neoca office (210.86.171.29)
– **Oracle ERP credentials** — MMNEW/MMNEW@millimed.world (production system)
– **SQL Server logins** including sysadmin (sa), mkuser, DB_ECM, dev_01-03
– **Microsoft 365 tenant** (millimedthailand.com) — cloud email and collaboration
– **Active Directory** — domain controller at 192.168.1.2
### 🏭 Complete Factory Infrastructure
– **233+ department folders** from the factory file server — every production, quality, regulatory, and administrative department
– **22 CCTV cameras + 1 access control** — complete Hikvision surveillance network with IP addresses and serial numbers covering BFS sterile area, laboratories, warehouses, food production, and all manufacturing floors
– **31 internal network subnets** (192.168.69.0/24 through 192.168.100.0/24) — full factory network topology
– **5 internal servers identified** — AD domain controller, 2x Orion NAS, barcode server, Chiang Rai center NAS
– **VMware vSphere** virtualization infrastructure, **CheckMK** monitoring, **Hikvision iVMS-4200** CCTV management
### 🏭 Sales & Operations
– **SALES & SALESAPP databases** (12+ GB) — complete sales history, pricing, customer relationships from 2022-2026
– **Monthly sales performance presentations** (January 2025 — August 2026) — OTC + prescription by area, product, channel
– **Marketing database** — campaigns, customer targeting, product focus data
– **Stock management** — inventory across all facilities
– **Forecast data** — business projections and planning
– **Transport & logistics** — GPS tracking, delivery records, government pharmaceutical organization reports
—
## Regulatory Impact
Millimed should be aware of the following consequences of this data becoming public:
1. **Thai FDA (อย.) Manufacturing License** — We hold the **actual BMR documents, QA audit records, and 14 types of regulatory audit documentation** including corrections (CAR/PAR). This is not just database records — these are the physical production documents that underpin every drug Millimed manufactures. Release triggers **immediate FDA review and potential suspension of manufacturing licenses**. The FDA Quality Award for 3 consecutive years ends here.
2. **PDPA Violation (พ.ร.บ.คุ้มครองข้อมูลส่วนบุคคล)** — Personal data of **over 1,000 employees** including national ID numbers, salaries, biometric data, and home addresses has been compromised. The PDPA Office can impose fines up to **5 million THB per violation** and criminal penalties including imprisonment.
3. **Revenue Department Exposure** — We hold active login credentials for **ALL 25+ company tax portals** plus the complete intercompany financial structure across the group. The multi-entity accounting data, transfer pricing arrangements, and BOI tax incentive records will be of great interest to Thai tax authorities.
4. **Drug Formulation Theft** — Complete drug formulations including **Master Formula documents**, bioequivalence study data, R&D results, and regulatory submissions for the entire product portfolio. Competitors gain **decades of R&D investment** in seconds. The i-HERB brand formulas, Neoca supplement compositions, BFS sterile manufacturing specifications, and all proprietary pharmaceutical formulations are fully exposed.
5. **Bioequivalence Study Exposure** — Bio Equalise subsidiary’s complete BE studies, including the **contract with Chiang Mai University**, LC-MS/MS analytical data, and OECD-compliant study reports. Competitors can use this data to bypass their own bioequivalence testing requirements.
6. **Banking & Credit Exposure** — K-Bank and EXIM Bank credit facility details, loan covenants, and the true financial health of each subsidiary will be publicly available, potentially triggering credit reviews, covenant violations, or credit rating downgrades.
7. **Physical Security Compromise** — The complete **CCTV surveillance network** (22 cameras + access control) with IP addresses and serial numbers, factory network topology, and building plans are exposed. Combined with VPN access credentials, this represents a total physical and digital security failure.
—
## Message to Millimed Management
Chairman **Thongplew Siripornpithak** (ทองเปลว ศิริพรพิทักษ์) and the board of directors had an opportunity to resolve this matter privately. That window is closing.
The data we hold represents the **complete digital footprint** of your 25+ company pharmaceutical empire — **over 3 terabytes** spanning both factory locations, the Bangkok headquarters, and all subsidiary operations. From drug manufacturing records to tax filings, from employee national IDs to bank loan structures, from factory CCTV configurations to Oracle ERP credentials.
Your **Millimed BFS** subsidiary generated **593 million THB in net profit** last year with a 41.7% margin. Your parent company holds **942 million THB in retained earnings**. You can afford to resolve this.
Your **i-HERB brand**, endorsed by Mario Maurer and sold across Thailand, depends on consumer trust. Your **FDA manufacturing licenses** depend on the integrity of your BMR and QA data. Your relationships with **K-Bank and EXIM Bank** depend on financial confidentiality. Your **ISO and Halal certifications** depend on audit documentation security.
**All of this — 3 terabytes of it — is now in our hands.**
We strongly recommend Millimed’s management reconsider their position and contact us immediately to resolve this situation before the full dataset is published.
**Screenshots below demonstrate the scope and authenticity of the breach:**
*(See attached: 26 evidence screenshots)*
- Group: inc ransom
- Discovered: 2026-11-10 22:33 UTC
This entry reflects a claim published by an extortion group and collected by a public tracker. It has not been independently verified.
Source: RansomLook — Recent Posts · 2026-11-10