We are an innovative, competitive and leading pharmaceutical and healthcare company with strong brands and sustainable double digits growth. We are proud to deliver high quality products and excellent services to our customers so they can have better lives.
At Lonza, we enable A Healthier World by supporting our healthcare customers on the path to commercialization. Our community of 16,000 talented employees work across a global network of more than 30 sites to deliver for our customers across the pharma, biotech and nutrition markets. By combining technological insight with world-class manufacturing, scientific expertise and process excellence, we help our customers to deliver new and innovative medicines that help treat a wide range of diseases. While we work in science, there’s no magic formula to how we do it. Our greatest scientific solution is talented people working together, devising commitment and ideas that help our customers to help people. In exchange, we let our people own their careers. Their ideas, big and small, genuinely improve the world. And that’s the kind of work we want to be part of. Our work makes A Meaningful Difference.
Security & Compliance Standards Overview
No incidents recorded for Mahakam Beta Farma in 2025.
No incidents recorded for Lonza in 2025.
Mahakam Beta Farma cyber incidents detection timeline including parent company and subsidiaries
Lonza cyber incidents detection timeline including parent company and subsidiaries
Last 3 Security & Risk Events by Company
The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘percentage’ parameter in all versions up to, and including, 5.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
The ComboServlet in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, 2023.Q3.1 through 2023.Q3.5, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not limit the number or size of the files it will combine, which allows remote attackers to create very large responses that lead to a denial of service attack via the URL query string.
A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary directories on the target machine.
A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and create arbitrary directories on the target machine.
A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary files on the target machine.
