Pfizer, BioNTech Vaccine Docs Exposed In EU Regulator Hack

By Ben Kochman
Law360 is providing free access to its coronavirus coverage to make sure all members of the legal community have accurate information in this time of uncertainty and change. Use the form below to sign up for any of our weekly newsletters. Signing up for any of our section newsletters will opt you in to the weekly Coronavirus briefing.

Sign up for our Consumer Protection newsletter

You must correct or enter the following before you can sign up:

Select more newsletters to receive for free [+] Show less [-]

Thank You!



Law360 (December 9, 2020, 2:14 PM EST) -- Regulatory documents related to a COVID-19 vaccine candidate produced by Pfizer and BioNTech were "unlawfully accessed" during a cyberattack at the European Union's top authority for approving medicines, the companies said Wednesday.

In a joint statement, the U.S. pharmaceutical giant and German biotechnology company said the European Medicines Agency had told them that hackers gained access to a government server and viewed documents filed by the companies as part of their bid for regulatory approval of their COVID-19 vaccine candidate, known as BNT162b2.

The EMA confirmed that it had been hit with a cyberattack, saying in a statement that it was working with law enforcement and "other relevant entities" to investigate the matter. The agency provided no further details.

The identities of the hackers, their motives, and the specific information they accessed remained unknown Wednesday. But government officials from the U.S., U.K. and Canada have warned in recent months that cyberattackers backed by the Chinese and Russian governments were targeting COVID-19 vaccine research.

EU regulators have told Pfizer and BioNTech that the incident will have "no impact" on their timeline for reviewing the vaccine candidate, the companies said.

BioNTech and Pfizer said the cyberattack did not affect their own systems. They added that they were "unaware of any personal data of study participants being accessed" as part of the incident.

News of the cyberattack came on the same day that Canada's government authorized use of the Pfizer-BioNTech vaccine, becoming the third country in the world to do so, after the U.K. and Bahrain.

Britain's National Health Service began inoculating patients with the vaccine Tuesday, starting with nursing home residents and their caretakers, as well as health care workers and people over 80 years old.

The U.S. Food and Drug Administration is scheduled to meet Thursday to consider a request by Pfizer and BioNTech for emergency approval of the shot.

--Editing by Alyssa Miller and Aaron Pelc.

Update: This story has been updated with additional information on the cyberattack and the vaccine.

For a reprint of this article, please contact reprints@law360.com.

Hello! I'm Law360's automated support bot.

How can I help you today?

For example, you can type:
  • I forgot my password
  • I took a free trial but didn't get a verification email
  • How do I sign up for a newsletter?
Ask a question!