On May 8, 2026, Danish skincare manufacturer DermaPharm A/S appeared on the leak site of the ransomware group known as thegentlemen. The company, which produces mild, eco-certified personal care products and serves as a private-label manufacturer for other brands, is claimed to have had internal files exfiltrated during a ransomware attack.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch DermaPharm
Get alerted the next time DermaPharm files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about DermaPharm’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Reported Details of the Incident
Public reporting indicates that DermaPharm’s data was listed on the group’s leak portal hosted via ransomware.live. The exposed material consists of internal files obtained after the attackers gained access to the company’s systems. No confirmed total number of individuals affected has been released, and the precise volume or specific categories of personal data remain unclear from available reporting. DermaPharm, founded in 1980 and headquartered in Fårup, Denmark, operates a 10,000 m² production facility and maintains close partnerships with organizations including the Danish Cancer Society.
The listing follows the group’s standard pattern of publishing samples or threatening further release if demands are not met. Industry research from sources such as DoxxScan™ continuous monitoring indicates that manufacturing and consumer-product companies increasingly appear in these incidents because customer, supplier, and employee records are often stored alongside operational data.
Why This Matters for You and Your Family
When a company like DermaPharm suffers a breach, the information it holds about customers, distributors, partners, and employees can end up in the hands of criminals. If you or anyone in your household has purchased their products, worked with them, or had your details shared through a retailer or healthcare partner, your personal information may now be at risk. Names, contact details, and purchase records can be combined with data from other breaches to build a detailed profile.