Skip to content

🛒 Consumer & Retail

Retail, e-commerce, food & beverage, hospitality, consumer goods · a shareable slice of the daily brief for stakeholders who only care about this industry · RSS feed

Victims L30D10— flat
Prior 30D10
Active actor L90DUnknown · 4
Active actor L90DQilin · 3
Active actor L90DShinyHunters · 2

Today — 03 Nov 2026

Online fashion retailer Revolve discloses a payment-card breach.HighConsumer & RetailRevolve told investors that attackers used automated means to obtain customer names, contact details, and stored payment-card numbers with expiration dates; a Massachusetts filing contains the consumer-notice letter. The company has not disclosed when the intrusion occurred, and a reported ~127,200-record Texas count could not be independently corroborated against a primary filing — treat that figure as unverified. No operational disruption or expected material financial impact, per the company. The Record · Massachusetts AG filing
The slow-burn cyber-attrition campaign against Russian retail continues with Poryadok's five-day outageMediumConsumer & Retaila home-goods chain (48 stores, 32 cities) that confirmed a cyberattack forced store closures and suspended online ordering, following the same pattern as Wildberries, Verny and WineLab earlier in 2026. No attribution confirmed for this incident specifically, but the recurring targeting of Russian consumer-facing retail and logistics is consistent with the pro-Ukraine hacktivist pattern tracked through the year — a form of economic pressure that runs alongside, not instead of, battlefield and sanctions pressure. The Record

Last 14 days

Burger King Japan confirms an 11.18M-record app-member breach — a catch-up item this desk missed last week.HighConsumer & RetailUnauthorized access ran Oct 2–7, discovered and blocked, disclosed Oct 15 and reported to Japan's Personal Information Protection Commission; names, dates of birth, gender, emails and phone numbers are affected, and the company says the compromised server held no card numbers and it has found no evidence of credential theft. See Number of the day. BleepingComputer

Recent victim claims

Newest first, mapped to this industry from the victim database. Most are leak-site claims — verify before acting.

October 2026

Oct 16 Pattison Food Group (More Rewards) Unknown Ransomware · retail / grocery · Canada Pattison Food Group (Save-On-Foods, Buy-Low Foods, PriceSmart Foods, Nesters) confirmed customer personal information in its More Rewards loyalty database was accessed after discovering unusual server activity Oct 13: names and, where provided, addresses, phone numbers, emails and dates of birth. Company says passwords, payment data and transaction history were not accessed; customer count undisclosed; privacy regulators notified. No actor has claimed responsibility. · Sources: BNN Bloomberg · Global News
Oct 13 TFG London (Phase Eight, Hobbs, Whistles) Unattributed Breach · fashion retail · United Kingdom UK arm of The Foschini Group confirmed a cyberattack (identified Oct 11) disrupting IT systems at Phase Eight, Hobbs and Whistles; Inside Story/White Stuff and TFG Africa/Australia (separate systems) unaffected. Stores still trading; unknown yet whether customer data was compromised. Second UK fashion retailer breach disclosed within a week, after ASOS (Oct 7). · Sources: The Record · TechCentral
Oct 12 Ahold Delhaize Unattributed Breach · grocery · Netherlands Grocery giant (Albert Heijn, Delhaize, Food Lion, Stop & Shop, Giant Food, Hannaford) disclosed a cybersecurity incident and proactively took some systems offline; online ordering/delivery and internal systems (employee schedules/pay stubs at Stop & Shop) disrupted in NL, Belgium and US. No actor has claimed responsibility; no exfiltrated data has surfaced publicly. Second major incident in two years after the Nov 2024 INC Ransom attack. · Sources: SecurityWeek · BleepingComputer
Oct 12 Intermarché / Carrefour / Système U (French supermarket refrigeration attack) Unattributed Breach · grocery · France Overnight Oct 11-12 attackers compromised refrigeration-control software (older Danfoss units with unpatchable security software flagged as a factor) at 500+ French supermarkets -- Intermarché/Netto, Carrefour and Coopérative U/Système U all confirmed impact -- forcing fridges/freezers to run hot for hours, spoiling an estimated millions of euros of food and causing some equipment fires. No actor has claimed responsibility and no ransom demand has been identified; Paris prosecutors opened a cybercrime investigation and the PM directed the national cyber agency to investigate. · Sources: Al Jazeera · OCCRP
Oct 09 Bookoff Group Holdings Unattributed Breach · Retail · Japan Secondhand-goods retail chain discloses up to 6.43M member records (names, addresses, emails, hashed passwords) potentially leaked via unauthorized access to a subsidiary's membership system; disclosed Oct 9. Payment data not affected. Company-confirmed. · Sources: MLex
Oct 09 Ricardo (SMG Swiss Marketplace Group) Unknown Ransomware · e-commerce · Switzerland Detected suspicious server activity Oct 7; ~890,000 user accounts' names, postal addresses and phone numbers (plus company names for business accounts) exposed via unauthorized access tied to order data. Emails and passwords not affected; no extortion demand or ransom reported. Company-confirmed, notified Switzerland's FDPIC and NCSC, filing a criminal complaint. · Sources: bluewin.ch · netzwoche.ch
Oct 08 Lawson Unattributed Breach · Retail · Japan Convenience store chain discloses 2,155,345 Lawson ID member records plus 26 app records exposed via an intrusion between Sep 12-17; disclosed Oct 8-9. Roughly 10% of its loyalty-program membership base. Company-confirmed. · Sources: News On Japan
Oct 07 Citizen Watch Unattributed Breach · Consumer & Retail · Japan Watchmaker discloses Citizen/Bulova/Frederique Constant customer-inquiry-form data potentially exposed (disclosed Oct 6) via the same Scala Communications 'i-ask' vendor breach that hit Sompo Japan and Daiwa Securities. Company-confirmed vendor-chain exposure, no misuse confirmed. · Sources: Rescana
Oct 06 ASOS Unknown Ransomware · retail · United Kingdom Customers received a rogue push notification claiming a group called Xuanye Group compromised ASOS's Snowflake environment and would leak data. ASOS confirms unauthorized access to a third-party notification platform; says names/contact details may be exposed, no payment-card data or passwords. Snowflake says its own platform was not compromised. No data sample published; attacker identity and breach scope remain an unverified claim. · Sources: SecurityWeek · The Record
Oct 05 Monogatari (Yakiniku King) Unattributed Breach · Food Service · Japan Restaurant chain (Yakiniku King) discloses a leak of 10,788,963 member records via its app's member-management system, discovered Oct 2, disclosed Oct 5: names, emails, phone numbers and membership numbers. Company says no passwords or payment data exposed. Company-confirmed. · Sources: ASCII.jp · Qatar Tribune
Oct 02 Sports Events365 Qilin Ransomware · Travel · GB Listed on Qilin's leak site; unverified claim, no company confirmation. · Sources: Ransomware.live
Oct 01 O'Reilly Automotive ShinyHunters Extortion · Consumer & Retail · US ShinyHunters listed O'Reilly Automotive on its dark-web leak site Oct 1, threatening to publish data absent contact; listing deleted Oct 3 (removal pattern consistent with, but not proof of, negotiation). No company confirmation found. Unverified claim. · Sources: Cybernews

September 2026

Sep 30 assist2enjoy.be SafePay Ransomware · Consumer & Retail · Belgium Belgian wholesale/retail distributor of electrical household appliances (est. 2015) listed on SafePay's leak site; no company confirmation. · Sources: Ransomware.live
Sep 28 Kellys Home Center Pear Ransomware · Retail · USA Home-appliances/mattresses/furniture retailer listed on Pear's leak site (data-theft-only extortion group, no encryption); estimated attack date Sep 24, listed Sep 28. Unverified claim, no company confirmation. · Sources: Ransomware.live
Sep 24 Holly Poultry Settra Ransomware · Food Processing · US Baltimore, MD poultry company; Settra claims 435GB and 133 exposed passwords. Unverified claim. · Sources: Ransomware.live
Sep 20 ShopDunk Qilin Ransomware · Consumer & Retail · Thailand Qilin listed ShopDunk, a Thailand-based retail/e-commerce organization, on its leak site Sep 20. No data volume, ransom figure or company confirmation disclosed. DLS claim only. · Sources: RedPacket Security
Sep 20 Fanatics N0n Ransomware · consumer & retail · USA N0n listed Fanatics, the global sports e-commerce platform, on its leak site Sep 20, claiming 46,902 order files (~108GB) of customer PII, AP invoices, bank transaction records and tax-exemption certificates, with a Sep 23 01:01 UTC deadline. No company confirmation. DLS claim only. · Sources: RedPacket Security · SOCRadar
Sep 19 Electrolux Group Emperador Ransomware · Consumer & Retail · Sweden Emperador claimed Sep 19 to have accessed Electrolux Group's Azure database, listing the Swedish home-appliance multinational on its leak site and claiming roughly 41GB of data including a password-locked archive (Electro_backup.7z); threatens to release the password and data if ransom demands are not met. No company confirmation. DLS claim only. · Sources: Ransomware.live · DeXpose
Sep 13 Kimberly-Clark ShinyHunters Extortion · Consumer Goods / Manufacturing · USA ShinyHunters DLS listing Sep 13 2026 against Kimberly-Clark, the Fortune 500 consumer-products maker (Huggies, Kleenex, Scott); group issued a final warning threatening data release and unspecified 'disruptive' action unless the company opens negotiations by Sep 16. No data volume or scope disclosed yet; no company confirmation. 🟥 unverified DLS claim. · Sources: Ransomware.live · DeXpose
Sep 08 GT Distributors Play Ransomware · law enforcement equipment · US Austin, Texas-based national distributor of tactical gear, firearms accessories and uniforms for law enforcement, military and public-safety agencies; listed on Play's leak site Sep 8 claiming internal data theft. Play uses double extortion (no upfront ransom demand in the leak note); data scope and impact unconfirmed. · Sources: RedPacketSecurity

August 2026

Aug 13 D&J Beverage Service Qilin Ransomware · Beverages · US Qilin DLS claim August 13, 2026; scope unconfirmed. · Sources: https://www.ransomware.live/group/qilin
Aug 07 Levi Strauss Unknown Ransomware · Retail/Apparel · US Social engineering of employee computers; attacker accessed corporate files; consumer data not affected; breach contained · Sources: https://therecord.media/levis-data-breach-social-engineering
Aug 03 Winn-Dixie Anubis Ransomware · Retail / Grocery · US Anubis ransomware DLS claim August 3 2026; major US Southeast grocery chain; no statement from Winn-Dixie; data scope and impact unconfirmed · Sources: https://www.ransomware.live/
Aug 01 The Butcher Brothers Play Ransomware · Food Processing · US Play DLS claim August 1 2026; US food processing/distribution. No victim statement; no data published; no data volume disclosed. · Sources: https://www.ransomware.live/id/VGhlIEJ1dGNoZXIgQnJvdGhlcnNAcGxheQ==

July 2026

Jul 22 Estee Lauder Clop Extortion · consumer/cosmetics · US Clop exploited Oracle E-Business Suite zero-day CVE-2025-61882 to access EL HR systems (attack Aug 9 2025, discovered Jun 19 2026, disclosed via CA AG filing Jul 22 2026); exposed SSNs, passport numbers, bank account details, health info, payroll and performance data for employees; 24 months Kroll identity monitoring offered · Sources: https://www.bleepingcomputer.com/news/security/est-e-lauder-discloses-data-breach-via-oracle-e-business-flaw/
Jul 21 Fairlife (Coca-Cola subsidiary) Anubis Ransomware · food and beverage · US Anubis RaaS (emerged Dec 2024) claimed the July 16 Fairlife ransomware attack on its DLS July 21, 2026; claims ~1TB exfiltrated corporate data with ransom deadline end of week; Coca-Cola confirmed attack via SEC filing (third-party access to Fairlife IT environment); US dairy production suspended; Canadian operations unaffected; 🟥 data scope and exfiltration volume unverified · Sources: BleepingComputer · Cybernews · Coca-Cola SEC filing
Jul 18 Salina Supply Qilin Ransomware · retail (home improvement/building supplies) · United States Qilin DLS posting July 18; data claimed exfiltrated; unverified — no public statement from Salina Supply · Sources: https://www.ransomware.live
Jul 17 Danone Qilin Ransomware · food/beverage manufacturing · FR Qilin DLS claim July 17: 221 GB claimed (91,558 files) including year-end financial summaries, customer account database, NDAs, and quarterly sales reports 2023-2025. Danone has not confirmed; treat as claim only. · Sources: https://cybernews.com/news/danone-evian-silk-international-delight-qilin-ransomware-attack/ · https://www.ransomware.live/group/qilin
Jul 16 Fairlife LLC (Coca-Cola subsidiary) Unattributed Breach · Food & Beverage / Dairy Manufacturing · US Coca-Cola subsidiary Fairlife detected unauthorised third-party access to production-related systems on July 16 2026; ransomware event halted all US dairy production including Ultra-Filtered Milk, Core Power Protein Shakes, and Nutrition Plan; Canada operations unaffected; no actor claimed responsibility; no data theft confirmed; investigation ongoing with outside advisors; law enforcement notified · Sources: https://techcrunch.com/2026/07/16/coca-cola-suspended-production-at-its-fairlife-dairy-after-a-ransomware-attack/ · https://www.theregister.com/cyber-crime/2026/07/17/ransomware-curdles-production-at-coca-colas-fairlife-dairy-biz/5274157 · https://www.helpnetsecurity.com/2026/07/17/coca-cola-fairlife-ransomware-attack/
Jul 13 Nichirei Corporation RansomHouse Ransomware · Food & Logistics · Japan Ransomware attack disrupted 140 cold-chain distribution centers; impact on KFC Japan (1,300+ restaurants), Aeon, Kura Sushi supply chains. DLS claim posted Jul 22-23; data theft scope unverified. · Sources: https://www.japantimes.co.jp/business/2026/07/22/companies/nichirei-cyberattack-ransomhouse/
Jul 11 Carita The Gentlemen Ransomware · retail · France French luxury skincare and cosmetics brand claimed on The Gentlemen data leak site July 11; data type and volume unconfirmed; company has not issued a public statement · Sources: ransomware.live · breachsense.com
Jul 10 Lidl Unattributed Breach · retail · Germany Third-party IT service provider breach; customer data from Lidl online shops in Germany, Belgium, and Netherlands exfiltrated; names, phone numbers, email addresses, dates of birth, customer numbers, and salutations exposed; passwords, billing/delivery addresses, bank details, and payment information potentially compromised; Lidl notified affected customers July 10; Dutch and Belgian data protection authorities notified; forensic investigation ongoing · Sources: BleepingComputer · Help Net Security · SC Media
Jul 08 Wade's Dairy Akira Ransomware · food · dairy manufacturing/US Akira DLS claim July 8, 2026; data scope and impact unconfirmed; 🟥 unverified · https://sharkstriker.com/blog/ransomware-roundup/ · https://www.ransomware.live/group/akira · Sources: [SharkStriker] · [ransomware.live]
Jul 07 Mercado Libre The Gentlemen Ransomware · e-commerce · technology/Argentina Latin America's largest e-commerce and fintech platform; The Gentlemen DLS claim July 7, 2026; approximately 118,244 users reportedly affected; company has not issued a public statement; data scope and impact unconfirmed; 🟥 unverified — verify before treating as breach · https://www.escudodigital.com/en/cybersecurity/mercado-libre-hit-by-ransomware-attack.html · https://blog.rankiteo.com/mer1783492030-mercado-libre-ransomware-july-2026/ · https://www.ransomware.live/id/TWVyY2FkbyBMaWJyZUB0aGVnZW50bGVtZW4= · Sources: [EscudoDigital] · [Rankiteo] · [ransomware.live]
Jul 06 AC Beverage Unattributed Breach · beverage · US PEAR DLS claim July 6, 2026; data scope and impact unconfirmed; 🟥 unverified · https://www.ransomware.live/group/pear · Sources: [ransomware.live]
Jul 02 Dixie Beverage West Qilin Ransomware · beverage distribution · US Qilin DLS claim July 2, 2026; data scope and impact unconfirmed; 🟥 unverified · https://www.ransomware.live/group/qilin · Sources: [ransomware.live]
Jul 02 Pennant Hills Golf Club Qilin Ransomware · hospitality · Australia Qilin DLS claim July 2, 2026; data scope and impact unconfirmed; 🟥 unverified · https://www.ransomware.live/group/qilin · https://www.hendryadrian.com/ransom-pennant-hills-golf-club-jul-2026/ · Sources: [ransomware.live] · [hendryadrian.com]
Jul 02 Tofutown Payload Ransomware · food manufacturing · organic plant-based foods/Germany traditional organic food manufacturer (est. 1981; vegan spreads, tofu, seitan products); Payload DLS claim July 2, 2026 (07:26 UTC); data scope and impact unconfirmed; 🟥 unverified · https://www.ransomware.live/group/payload · https://www.hendryadrian.com/ransom-tofutown-jul-2026/ · Sources: [ransomware.live] · [hendryadrian.com]
Jul 02 JS Hotels LockBit Ransomware · Hospitality · Spain Spanish hospitality group (jshotels.com) operating 10 hotel properties in Majorca; listed on LockBit 5.0 DLS approximately July 2 2026. DLS claim unverified. · Sources: https://www.ransomware.live/id/anNob3RlbHMuY29tQGxvY2tiaXQ1
Jul 01 Refinery Hotel Akira Ransomware · hospitality · hotel/US luxury boutique hotel near Bryant Park (197 rooms, Parker & Quinn restaurant, Refinery Rooftop bar); Akira DLS claim July 1, 2026; 15 GB claimed including employee PII (passports, driver's licenses, SSNs, W-9 forms), guest information, financials, contracts and agreements, and NDAs; data scope unconfirmed; 🟥 unverified — no victim statement · https://www.redpacketsecurity.com/akira-ransomware-victim-refinery-hotel/ · https://www.hookphish.com/blog/ransomware-group-akira-hits-refinery-hotel/ · https://ransomware.live/id/UmVmaW5lcnkgSG90ZWxAYWtpcmE= · Sources: [RedPacket Security] · [HookPhish] · [ransomware.live]
Jul 01 Starpool WorldLeaks Ransomware · wellness · spas/Italy Italian designer and manufacturer of premium wellness cabins, saunas, steam rooms, and hydromassage systems; WorldLeaks DLS claim July 1, 2026; data scope and impact unconfirmed; 🟥 unverified · https://www.ransomware.live/group/worldleaks · https://www.dexpose.io/ · Sources: [ransomware.live] · [DeXpose]
Jul 01 B'Laofood Joint Stock Company KRYBIT Ransomware · food manufacturing · Vietnam KRYBIT DLS claim July 1, 2026; data scope and impact unconfirmed; 🟥 unverified · https://www.dexpose.io/krybit-ransomware-attack-on-blaofood-joint-stock-company/ · https://www.ransomware.live/id/Ymxhb2Zvb2QuY29tQGtyeWJpdA · Sources: [DeXpose] · [ransomware.live]
Jul 01 Hotel de la Bourse LockBit Ransomware · Hospitality · France Hotel in Mulhouse, France (hotel-bourse.com) listed on LockBit 5.0 DLS approximately July 1 2026, discovered July 11 2026. DLS claim unverified. · Sources: https://ransomware.live/id/aG90ZWwtYm91cnNlLmNvbUBsb2NrYml0NQ==

June 2026

Jun 30 Hwa Seng Water Resources Biotech Co., Ltd. DragonForce Ransomware · beverage manufacturing · Taiwan DragonForce DLS claim June 30, 2026; estimated attack date June 28, 2026; data scope and impact unconfirmed; 🟥 unverified · https://www.ransomware.live/group/dragonforce · https://www.breachsense.com/breaches/2026/june/ · Sources: [ransomware.live] · [Breachsense]
Jun 30 Pou Sheng International Holdings The Gentlemen Ransomware · footwear retail · China+Hong Kong China-based athletic footwear retailer and Yue Yuen Group subsidiary; The Gentlemen DLS claim June 30, 2026; data scope and impact unconfirmed; 🟥 unverified · https://www.ransomware.live/group/thegentlemen · Sources: [ransomware.live]
Jun 30 SDEZ The Gentlemen Ransomware · textile services · France historic French family-owned company (est. 1816) specialising in industrial rental and maintenance of professional linen, workwear, and hygiene equipment; national network of industrial laundries across France and Belgium; 700+ employees; The Gentlemen DLS claim June 30, 2026; data scope and impact unconfirmed; 🟥 unverified · https://ransomware.live/id/U0RFWkB0aGVnZW50bGVtZW4= · Sources: [ransomware.live]
Jun 30 Mondottica The Gentlemen Ransomware · fashion · luxury eyewear/Italy global luxury eyewear company specialising in design, production, and worldwide distribution of premium sunglasses and optical frames under licensed brand names; international operations across Europe and APAC; The Gentlemen DLS claim June 30, 2026; data scope and impact unconfirmed; 🟥 unverified · https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-mondottica/ · https://www.ransomware.live/group/thegentlemen · Sources: [RedPacket Security] · [ransomware.live]
Jun 30 Arkın Group BlackNevas Ransomware · hospitality · casino/Northern Cyprus diversified hospitality and gaming conglomerate in Northern Cyprus (casino resorts, hotels); BlackNevas DLS claim June 30, 2026; 1.4 TB exfiltrated claimed; data scope and impact unconfirmed; 🟥 unverified · https://www.ransomware.live/group/blacknevas · https://www.redpacketsecurity.com/ · Sources: [ransomware.live] · [RedPacket Security]
Jun 30 Tour Edge SETTRA Ransomware · sporting goods · golf equipment manufacturing/US US-based golf equipment manufacturer producing irons, woods, hybrids, and wedges across multiple premium lines; SETTRA DLS claim June 30, 2026; data scope and impact unconfirmed; 🟥 unverified · https://www.dexpose.io/settra-targets-golf-manufacturer-tour-edge/ · https://www.ransomware.live/group/settra · Sources: [DeXpose] · [ransomware.live]
Jun 30 VCNY Home SETTRA Ransomware · home textiles · consumer goods/US US-based home textiles company (bedding, bath, and decorative products; distributed through major US retail chains); SETTRA DLS claim June 30, 2026; estimated attack date June 2, 2026; data scope and impact unconfirmed; 🟥 unverified · https://x.com/FalconFeedsio/status/2071950309254185226 · https://www.ransomware.live/id/dmNueWhvbWUuY29tQHNldHRyYQ== · Sources: [FalconFeeds] · [ransomware.live]
Jun 29 GDN AR INC Ransom Ransomware · grocery · food retail/Argentina Argentine grocery store operator headquartered in Ciudad Autónoma de Buenos Aires; INC Ransom DLS claim June 29, 2026; data scope and impact unconfirmed; 🟥 unverified · https://www.ransomware.live/id/R0ROIEFSKERvcmlua2EpQGluY3JhbnNvbQ · Sources: [ransomware.live]
Jun 29 Canopy Brands SETTRA Ransomware · consumer goods · US SETTRA DLS claim June 29, 2026; data scope and impact unconfirmed; 🟥 unverified · https://www.ransomware.live/id/Y2Fub3B5YnJhbmRzLnVzQHNldHRyYQ== · https://x.com/FalconFeedsio/status/2070588706558550063 · Sources: [ransomware.live] · [FalconFeeds]
Jun 29 Quality Dining Inc. SETTRA Ransomware · food services · restaurant operator/US one of the largest US Burger King and Chili's franchise operators (Indiana-based); SETTRA DLS claim June 29, 2026; data scope and impact unconfirmed; 🟥 unverified · https://www.ransomware.live/group/settra · Sources: [ransomware.live]
Jun 28 1-800-Dentist Qilin Ransomware · consumer services · dental referral/US US national dental referral and appointment-scheduling service (connects patients with 25,000+ dentist offices nationwide); Qilin DLS claim June 28, 2026; estimated attack date June 28; data scope and impact unconfirmed; 🟥 unverified — verify before treating as a breach · https://www.redpacketsecurity.com/qilin-ransomware-victim-1-800-dentist/ · https://www.ransomware.live/id/MS04MDAtZGVudGlzdEBxaWxpbg== · Sources: [RedPacket Security] · [ransomware.live]
Jun 28 ESHA Research/ESHA Cloud Services Stormous Ransomware · food · nutrition software/US food and beverage nutrition database and regulatory compliance software company (Salem, Oregon); core product development databases allegedly accessed; Stormous DLS claim June 28, 2026; 🟥 unverified — no vendor statement · https://www.hookphish.com/blog/ransomware-group-stormous-hits-eshacloudqa-com/ · https://socradar.io/free-tools/ransomware-intelligence/victims/eshacloudqa-com-352c7808 · Sources: [HookPhish] · [SOCRadar]
Jun 28 Monoprix.tn Stormous Ransomware · retail · Tunisia Tunisian supermarket and retail chain (monoprix.tn); Stormous DLS claim June 28, 2026; data scope unconfirmed; 🟥 unverified — no victim statement · https://www.ransomware.live/id/bW9ub3ByaXgudG5Ac3Rvcm1vdXM · Sources: [ransomware.live]
Jun 28 LifeVantage Corporation SETTRA Ransomware · health and wellness supplements · US publicly traded direct-sales nutritional supplement company (NASDAQ: LFVN); SETTRA DLS claim June 28, 2026; data scope and impact unconfirmed; 🟥 unverified · https://www.dexpose.io/settra-ransomware-hits-lifevantage-corporation/ · https://ransomware.live/id/bGlmZXZhbnRhZ2UuY29tQHNldHRyYQ== · Sources: [DeXpose] · [ransomware.live]
Jun 28 PChome Online Inc. SETTRA Ransomware · e-commerce · Taiwan one of Taiwan's largest online retail and e-commerce platforms; breach estimated June 10, 2026 via infostealer malware compromising employee and customer accounts; 35,000+ users and employees' credentials and personal data exposed; SETTRA DLS claim June 28, 2026; 🟥 unverified — no PChome public statement · https://www.dexpose.io/settra-ransomware-attack-on-pchome-online-inc/ · https://www.galaxywarden.com/blog/breach/pchome-settra-ransomware-june-2026 · https://socradar.io/free-tools/ransomware-intelligence/victims/pchome-com-tw-bcdbab3d · Sources: [DeXpose] · [GalaxyWarden] · [SOCRadar]
Jun 25 impulso-store.com Stormous Ransomware · e-commerce · Italy Italian online retail platform; DLS claim June 25, 2026; data scope and impact unconfirmed · https://www.ransomware.live/ · https://www.breachsense.com/breaches/ · Sources: [ransomware.live] · [Breachsense]
Jun 25 Au Vieux Campeur The Gentlemen Ransomware · outdoor equipment retail · France French outdoor gear chain (24 stores, 180,000+ members); company confirmed cyberattack June 2, 2026 and mobilised incident response; DLS claim appeared June 25 after 23-day negotiation window closed without ransom payment; data scope unconfirmed · https://frenchbreaches.com/alertes/au-vieux-campeur-mq5ponk61juevh4e5fj · https://www.cyberattaque.org/au-vieux-campeur-victime-dune-cyberattaque-une-enquete-est-en-cours/ · https://www.ransomware.live/ · Sources: [FrenchBreaches] · [Cyberattaque.org] · [ransomware.live]

← All industries · Victim database →