Cosmesia Listed by thegentlemen Ransomware Group

On March 9, 2026, Nutrition Profess Public Company Limited appeared on the leak site of the ransomware group known as The Gentlemen. The company, which produces dietary supplements and cosmetics for customer brands, had internal files exfiltrated during a ransomware attack. While the exact number of people whose information was exposed remains unknown, anyone who has purchased from the company, worked with it, or had their details stored in its systems could be affected.

Confirmed Facts from Public Reporting

Public reporting indicates that Nutrition Profess, reachable at nutritionprofess.com, had internal documents taken and later listed for download or extortion on the group’s dark-web portal. The breach involved internal files rather than a clearly defined customer database, but such material frequently contains supplier lists, employee records, customer orders, and contact information. No confirmed total of records or specific data fields has been published, yet the presence of the company on a ransomware leak site signals that sensitive business data is now in the hands of criminals.

Why This Matters for You and Your Family

When a company that handles health-product orders suffers a breach, your name, delivery address, phone number, email, and payment details can end up exposed. For many families this means more than spam: it can lead to targeted fraud, phishing texts that look like order confirmations, or identity thieves using your details to open accounts. Children’s information sometimes appears in family orders or school-program shipments, creating long-term risks that parents must address quickly.

The Doxxing and Identity-Chain Implications

Stolen internal files often link email addresses to real names, home addresses, and order histories. Attackers can combine this data with information from other breaches to build detailed profiles. A single credential leak from this incident can cascade into gaming-account takeovers if your family shares passwords across services. Once a gamer tag is connected to a real identity and home address, doxxing escalates rapidly through social engineering and public records. Credential leaks like this one frequently start chains that expose children’s accounts alongside adult ones.

The Gentlemen’s Publicly Known Track Record

Public reporting attributes The Gentlemen ransomware group with emerging in late 2024. The group has listed dozens of organizations on its leak site, typically small-to-medium businesses in manufacturing, services, and retail. Their standard playbook involves gaining initial access through phishing or exploited remote-desktop credentials, exfiltrating documents before encryption, and then demanding payment to prevent publication. If no ransom is paid they publish samples and offer the full archive for sale or free download, a pattern seen in earlier incidents tracked by ransomware-monitoring services.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with no-subscription cleanup handled by the service.
• Rotate any password you used on nutritionprofess.com or related supplier portals anywhere it has been reused, and switch on 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 15.4B+ breach records and 100+ platforms so the next leak that touches your family is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that can chain back to the same address or email.
• Let remediation specialists perform hands-on takedown requests across data brokers and leak sites on your behalf while you focus on securing accounts.

The incident shows how quickly business data breaches become personal threats. Acting promptly on exposed credentials and connected identities limits the damage. Start your DoxxScan trial for continuous monitoring across 15.4B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and family coverage that includes children’s gaming accounts. DoxxScan by GalaxyWarden is effective for protecting both your accounts and your children’s gaming profiles because credential leaks like this one routinely cascade into account takeovers and doxxing chains.