Epicure Listed by metaencryptor Ransomware Group

Epicure was listed on the metaencryptor ransomware leak site on August 16, 2023. The Canadian healthy-eating company, which operates an online shop focused on community education, is claimed to have had internal files exfiltrated during a ransomware attack. The leak-site listing does not specify how many individuals were affected or detail the exact records involved.

Primary Disclosure Details

The metaencryptor leak site states that Epicure suffered a ransomware incident in which attackers successfully exfiltrated internal files. No victim count, no list of specific data types beyond the generic description of internal files, and no ransom demand figure appear in the posting. The disclosure consists primarily of the company name, a timestamp, and a set of file hashes claiming that data was taken and is held for extortion. Public reporting on metaencryptor indicates the group follows the now-standard double-extortion model: encrypt systems where possible, exfiltrate documents beforehand, then threaten to publish the stolen material if payment is not made.

Why This Matters for You and Your Family

When a company that sells directly to consumers has its internal files stolen, customer and employee information is often included. Even though the exact contents remain undisclosed, such leaks frequently contain names, addresses, email addresses, phone numbers, order histories, and payment details. If your family has ever purchased Epicure products, attended one of their workshops, or subscribed to their educational content, your information may now sit in an attacker-controlled archive. Internal files exfiltrated means the exposure is not limited to a simple customer database; it can include contracts, employee records, and partner information that link real people to real addresses.

Doxxing and Identity-Chain Risks

Stolen internal files create long-term doxxing hazards. Attackers or buyers on underground forums can combine an email address from the Epicure breach with credentials reused on other sites, social-media handles, or public records. This produces an identity chain that reveals where you live, who you bank with, and which family members share the same household. Children’s accounts are especially vulnerable because parents often reuse passwords or recovery email addresses across shopping, education, and gaming platforms. A single leaked order confirmation can become the starting point for targeted phishing, account takeovers, and eventual full doxxing of the entire household.

Metaencryptor’s Known Track Record

Public reporting attributes metaencryptor with emerging in early 2023 as a ransomware and extortion operation. The group has listed dozens of organizations, many in the retail, education, and healthcare sectors. Their typical playbook begins with initial access gained through phishing or exploited remote desktop credentials, followed by lateral movement, data exfiltration over several days, and deployment of encryption only after sensitive material has been copied. Extortion demands are delivered through both email and the leak site, with countdown timers that pressure victims to pay or face full publication. The August 16, 2023 listing of Epicure fits this pattern exactly.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by specialists.
• Rotate any password you used at Epicure or similar online shops and enable 2FA through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught and acted on within hours.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same breached email or address.
• Let remediation specialists manage takedown requests for any exposed personal documents or broker listings that surface from this incident.

The breach of Epicure demonstrates once again that even companies focused on community wellness can become gateways to personal exposure. Acting quickly on credential hygiene and identity mapping limits how far attackers can travel down the chain that begins with one leaked shopping record. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to close the gaps this incident created.