Radiant Beauty Supplies Listed by qilin Ransomware Group

On October 14, 2025, Canadian retailer Radiant Beauty Supplies appeared on the leak site of the qilin ransomware group in a listing claiming internal files were exfiltrated during a ransomware attack.

Reported Details of the Incident

Public reporting indicates that qilin listed Radiant Beauty Supplies, a business operating since 1968 that supplies professional hair, esthetics, and related beauty products. The data exposed consists of internal files stolen in the ransomware incident. The number of people whose information was contained in those files remains unknown. No specific deadline for payment has been publicly detailed in available reporting, though ransomware groups routinely set short windows before full data publication.

Why This Matters for You and Your Family

When a retailer like Radiant Beauty Supplies suffers a breach, customer records, supplier details, employee information, and order histories can be exposed. If you or your family have ever placed an order, attended a training session, or worked with the company, your contact details, payment records, or personal documents may now sit in an attacker’s archive. Stolen internal files often contain spreadsheets that link names, addresses, phone numbers, and email accounts. Once that information reaches underground forums, it can be resold within hours. For ordinary families this means a sudden spike in phishing emails, fake delivery texts, or identity-theft attempts that feel personal because the attackers already know where you shop and what you buy.

The Doxxing and Identity-Chain Risk

Credential leaks like this one rarely stop at a single company. A password reused between your beauty-supplies account and your email, streaming service, or children’s gaming logins creates a chain. Attackers map these connections, turning one breach into multiple account takeovers. Public reporting describes how such chains frequently lead to doxxing: home addresses published alongside family names, phone numbers, and photos scraped from linked social-media profiles. Gaming accounts belonging to children are especially vulnerable because parents often share the same password or recovery email. The result can be harassment, swatting, or financial fraud that starts from something as ordinary as buying hair products.

Qilin’s Publicly Known Track Record

Public reporting attributes the attack to the qilin ransomware group. The group emerged in 2022 and has since targeted organizations across North America, Europe, and Australia. Notable prior victims include healthcare providers, manufacturers, and retail businesses. Their typical playbook begins with initial access gained through phishing or exploited remote-desktop credentials, followed by rapid exfiltration of internal files and deployment of ransomware. They then demand payment in cryptocurrency and, if unpaid, publish samples or full datasets on their leak site. Available reporting describes qilin as opportunistic, hitting businesses of varying sizes with little public warning.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Rotate the password you used at Radiant Beauty Supplies anywhere it is reused, and switch on 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your family is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same addresses and recovery emails.
• Let remediation specialists handle takedown requests across data brokers and suspicious sites while you focus on securing your own accounts.

The incident shows that even long-established local businesses can become gateways to larger identity compromises. Acting quickly on the credentials and links already exposed can limit the damage. DoxxScan by GalaxyWarden provides continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that includes children’s gaming accounts. Starting that process now turns a breach you cannot control into a manageable list of concrete steps you can take today.