21stcenturyvitamins.com Listed by lockbit3 Ransomware Group

On May 10, 2024, the ransomware group LockBit3 added 21stcenturyvitamins.com to its public leak site, announcing that it had exfiltrated internal files during a ransomware attack against the dietary supplement manufacturer. The listing states that the attackers possess “a lot more” data and will publish it in one week unless the company contacts them to negotiate a deal. The notification does not specify the exact number of people affected or list the precise categories of records taken.

Details from the Leak Site

The primary disclosure on the LockBit3 onion site states that internal files were stolen from 21st Century Vitamins, one of the largest international manufacturers of dietary supplements. It includes a Mega.nz folder link as proof and warns that additional material will be released if no agreement is reached. The listing does not quantify the volume of data or name specific record types such as customer databases, payment information, or employee records. Public mirrors of the leak site, including ransomware.live, preserve the original post with its seven-day publication deadline.

Why This Matters for You and Your Family

When a supplement company’s internal files appear on a ransomware leak site, anyone who has ordered products, created an account, or provided contact details faces concrete risk. Internal files exfiltrated often contain names, shipping addresses, email addresses, phone numbers, and order histories that can be cross-referenced with other breaches. For families, this means your home address and children’s names could surface in data sets sold on underground forums. The disclosure makes clear that the data is already in the hands of professional extortionists who have no incentive to delete it even if the company eventually pays.

Doxxing and Identity-Chain Risks

Stolen order records create long identity chains. An email and shipping address from a vitamin purchase can be linked to social-media handles, gaming accounts, or school records. Once attackers map these connections, they can impersonate you to reset passwords elsewhere or sell the bundle to doxxing crews. Credential leaks of this nature frequently cascade into account takeovers on gaming platforms used by children, exposing family photos, chat logs, and location data. The result is not a single breach but a multiplying set of exposures that grow harder to contain over time.

LockBit3’s Known Track Record

Public reporting attributes LockBit3 as the current iteration of the LockBit ransomware operation, which first appeared in 2019 and rebranded after law-enforcement actions against earlier versions. The group has targeted hospitals, manufacturers, and retailers worldwide, typically gaining initial access through compromised remote desktop credentials or exploited vulnerabilities in public-facing applications. Their standard playbook involves exfiltrating data before encrypting systems, then posting samples on their leak site with countdown timers to pressure victims into payment. The 21st Century Vitamins listing follows this exact pattern.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Rotate any password you used at 21stcenturyvitamins.com wherever it has been reused and enable 2FA through an authenticator app instead of SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same address and email.
• Let remediation specialists manage takedown requests for any exposed personal documents that appear on broker sites or forums.

The incident underscores that even purchases as routine as dietary supplements can feed larger doxxing chains if a vendor’s internal systems are breached. Starting proactive steps now limits how far attackers can travel with the stolen data. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.