LaboratoriosBelloch (Nelly, Yunsey,Fresh feel) Listed by akira Ransomware Group

On May 16, 2025, the Akira ransomware group listed Laboratorios Belloch, a Spanish manufacturer of personal care and cosmetic products sold under the brands Nelly, Yunsey, and Fresh Feel, on its leak site and published a torrent containing 25 GB of stolen corporate data.

What Public Reporting Shows

Public reporting indicates the attackers exfiltrated internal project files, detailed financial records, client information, contracts, correspondence, and some employee personal documents. The company produces cosmetics and personal care items. The data was made available via magnet links for any torrent client such as uTorrent, qBittorrent, or Transmission. Available reporting describes the exposed material as including information tied to the three consumer brands but does not specify the exact number of individuals whose records were included.

Employee personal documents formed part of the package alongside extensive client and financial data. The leak site posting followed the group’s standard practice of publishing proof of exfiltration after encryption attempts.

Why This Matters for You and Your Family

When a company that handles everyday personal care purchases suffers a breach, the information it holds about customers, suppliers, and employees can appear on the open internet. If you or anyone in your household has purchased Nelly, Yunsey, or Fresh Feel products, corresponded with the company, or had your details stored as a client or vendor, those records may now be downloadable by anyone. Financial data, contracts, and personal documents can be combined with other leaks to build a profile that puts your family at risk of identity theft, fraudulent accounts, or targeted scams.

Children’s information is not immune. Many families register cosmetic or personal care purchases under a parent’s email that is also linked to a child’s gaming account. Once one piece of data surfaces, the rest can follow.

The Doxxing and Identity-Chain Implications

Ransomware leaks rarely stop at the first download. The 25 GB archive contains correspondence and client lists that frequently include email addresses, phone numbers, and names. Attackers and opportunistic criminals chain these details with information from earlier breaches to map relationships between online handles, real identities, and family members. A single exposed contract can reveal home addresses, payment details, or employee dates of birth that accelerate doxxing campaigns.

Credential leaks like this one cascade into account takeovers on unrelated services. If an email and password combination from the Laboratorios Belloch files matches one used for your child’s Roblox, Fortnite, or other gaming account, the entire household profile becomes vulnerable. Public reporting shows these chains often lead to harassment, SIM-swapping attempts, or demands for payment to prevent further release of private family information.

Akira Ransomware Group’s Track Record

Public reporting attributes the attack to the Akira ransomware group, which emerged in 2023. The group has targeted organizations across multiple sectors, including healthcare providers, manufacturers, and professional services firms. Its typical playbook involves initial access through compromised remote desktop credentials or phishing, followed by exfiltration of sensitive files before deploying encryption. Akira then demands ransom and, if unpaid, publishes stolen data on its leak site with simplified torrent downloads to maximize distribution and pressure victims. The group’s postings consistently include mixtures of corporate financials, client databases, and scattered employee personal documents.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity so you can see exactly what the 25 GB archive may have exposed about you.
• Rotate any password you used at Laboratorios Belloch or its brands anywhere it is reused, and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your family is flagged within hours instead of months.
• Cover the household with DoxxScan family coverage that includes dependents and your children’s gaming accounts, which often chain back to the same addresses and emails now circulating in the Akira torrent.
• Let remediation specialists handle takedown requests across data brokers and leak repositories for you while you focus on securing your own accounts.

The Laboratorios Belloch incident shows how quickly corporate data theft reaches ordinary families who simply bought shampoo or contacted customer service. Acting promptly on the exposed information can limit how far criminals take the chain. Start your DoxxScan trial and use its continuous monitoring, AI-powered identity-chain mapping, and hands-on remediation by specialists to protect your household—including gaming accounts that can become the next link in a doxxing campaign.