herbalcanadaonline.com Listed by funksec Ransomware Group

On February 7, 2025, the Canadian online retailer herbalcanadaonline.com appeared on the leak site of the funksec ransomware group. Internal files were allegedly exfiltrated during a ransomware attack, exposing data that could affect customers whose orders, payments, or contact details were stored in those systems.

What's Publicly Reported from Reporting

Public reporting indicates that funksec listed herbalcanadaonline.com on its dark-web leak portal. The company, which sells herbal supplements, vitamins, essential oils and related wellness products, suffered a ransomware intrusion in which attackers copied internal files before encrypting systems. The exact number of affected individuals remains unknown, and the precise contents of the stolen files have not been publicly detailed beyond the broad description of internal files. No customer count or specific data types such as credit-card numbers have been confirmed in available reporting.

Why This Matters for You and Your Family

When a retailer that holds names, addresses, phone numbers, email addresses or order histories is breached, that information can be used to launch targeted phishing, identity theft or harassment campaigns. If you or anyone in your household has ever ordered from herbalcanadaonline.com, your details may now sit in a criminal database. Children’s accounts are especially vulnerable because family orders often link parent and child profiles, creating an easy path for attackers to move from one identity to another.

The Doxxing and Identity-Chain Risks

Stolen customer records rarely stay isolated. Attackers combine them with data from earlier breaches to build detailed profiles that link email addresses, phone numbers, usernames and real-world identities. A single order confirmation email can expose shipping addresses, payment methods and even notes about family members. Once these links exist, doxxing escalates quickly: gaming accounts, social-media profiles and school-related logins can all be compromised using the same reused credentials. Credential leaks like this one routinely cascade into account takeovers across unrelated services.

Funksec’s Publicly Known Track Record

Public reporting attributes the attack to the funksec ransomware group. The group emerged in late 2024 and has targeted mid-sized organizations across retail, healthcare and technology sectors. Its typical playbook involves initial access through phishing or exploited remote-desktop services, followed by exfiltration of internal documents, databases and customer files. After encryption, funksec posts samples on its leak site and demands payment for non-disclosure, often setting short deadlines measured in days. The group’s prior victims include smaller e-commerce sites and service providers whose customer data later appeared in secondary sales on dark-web forums.

What to do

• Rotate any password you used at herbalcanadaonline.com anywhere else it is reused, and switch to 2FA through an authenticator app rather than text messages.
• Run a DoxxScan to map every link between your emails, phone numbers, handles and real identity, with cleanup handled by the service.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you is caught in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same address or parent credentials.
• Let remediation specialists perform hands-on takedown requests across data brokers and exposed profiles on your behalf.

The herbalcanadaonline.com breach is a reminder that even a single online purchase can feed a growing chain of personal data that criminals exploit for months or years. Start your DoxxScan trial today and combine identity-chain mapping, continuous monitoring, and specialist remediation to protect yourself and your family—including gaming accounts that are frequently targeted once credential leaks occur. DoxxScan by GalaxyWarden delivers exactly that layered defense.