On November 13, 2025, FullBeauty Brands appeared on the leak site of the Everest ransomware group after the company’s internal files were allegedly exfiltrated during a ransomware attack. The US-based apparel and home goods retailer, which sells under brands including Woman Within, Roaman’s, Jessica London, Ellos, Swimsuits For All, KingSize, and BrylaneHome, has not yet disclosed the exact number of customer records involved or the full scope of data exposed.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.
What Public Reporting Shows
Public reporting indicates that Everest posted proof of the breach on its leak site, claiming to have stolen internal documents from FullBeauty Brands. Available reporting describes the incident as a classic ransomware operation in which attackers gained access, exfiltrated data, and then threatened to publish it unless a ransom was paid. The precise volume of records and the specific categories of customer information remain unconfirmed by the company. No public statement from FullBeauty Brands had been issued at the time of the leak posting.
Why This Matters for You and Your Family
When a retailer like FullBeauty Brands suffers a breach, the information stolen can include names, addresses, phone numbers, email addresses, and payment details tied to past purchases. Millions of ordinary customers who shopped for clothing or home goods may now find their details circulating among criminals. For you and your family this means a higher risk of identity theft, phishing emails that look legitimate because they reference real orders, and unwanted spam or robocalls. Children’s accounts linked to family email addresses or shared shipping addresses can also become targets when household data leaks.
The Doxxing and Identity-Chain Implications
Stolen customer files rarely stay isolated. Attackers combine them with other breaches to build detailed profiles that link your email, phone number, physical address, usernames, and even children’s gaming handles. Once these connections are mapped, a single leak can trigger cascading account takeovers across shopping sites, social media, and gaming platforms. Public reporting shows that credential leaks of this type frequently lead to doxxing attempts, where personal addresses are published or used to harass families. Gaming accounts belonging to children are especially vulnerable because usernames and recovery emails often match the same household data now exposed in the FullBeauty breach.