On December 6, 2025, Italian fashion brand Camomilla appeared on the leak site of the datacarry ransomware group in a listing claiming internal files were exfiltrated during a ransomware attack.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Camomilla
Get alerted the next time Camomilla files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Camomilla’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates that datacarry posted Camomilla data on its leak portal. The company, founded in 1983 by Monica Bianco, produces women’s clothing, bags, shoes, and jewelry. Available reporting describes the incident as a ransomware attack in which attackers gained access to internal files and later published proof of exfiltration. The exact number of records exposed remains unknown, and the specific types of data have not been publicly detailed beyond the broad category of internal files. No customer count or list of exposed data fields such as names, payment information, or contact details has been confirmed in available sources.
Why This Matters for You and Your Family
When a company that handles customer orders, payments, and personal details is breached, the information it stores about you can end up in the hands of criminals. Even if you only bought a scarf or a pair of earrings, your name, email, shipping address, and payment history may have been inside the compromised systems. Credential leaks from retail breaches frequently cascade into other accounts because many people reuse the same email-and-password combination across shopping sites, social media, and email. For families this risk multiplies: children’s accounts, school emails, and family-shared logins can all become targets once one piece of information surfaces.
The Doxxing and Identity-Chain Implications
Ransomware groups rarely stop at publishing one company’s files. Once internal documents appear, opportunistic actors scrape them for email addresses, phone numbers, employee names, and customer records. These fragments are then cross-referenced with data from previous breaches to build detailed profiles. A single leaked order confirmation can link your email to your home address, phone number, and social-media handles. Attackers follow these identity chains to harass, impersonate, or extort. Gaming accounts belonging to children are especially vulnerable because they often share the same family email or phone number used for online shopping; one exposed credential can lead to account takeovers, in-game purchases, or doxxing on public leaderboards.