RADLEY.COM Listed by Clop Ransomware Group

On February 27, 2025, the Clop ransomware group added radley.com to its leak site, claiming that internal files had been exfiltrated from the British luxury handbag retailer’s online marketplace.

What Public Reporting Shows

Public reporting indicates that Clop extracted internal documents during a ransomware incident targeting Radley London’s e-commerce platform. The exact number of people affected remains unknown, and the specific types of customer records involved have not been disclosed. Available reporting describes the data as internal files rather than a full database dump. The listing appeared on the group’s leak site with a typical extortion timeline, although no public deadline for payment has been confirmed in secondary coverage.

radley.com operates as the primary online store for Radley London, selling leather handbags, purses, footwear, and watches. Customers routinely provide names, addresses, email addresses, phone numbers, and payment details when placing orders. Any breach of internal systems therefore carries the risk that personal and transactional records were taken.

Why This Matters for You and Your Family

When a retailer like Radley suffers a breach, your purchase history can link your home address, email, and payment information in one convenient package for identity thieves. Even if you bought only a single item years ago, that record can be combined with other leaks to build a profile that criminals use for fraud, phishing, or targeted scams against you or your family. Children’s accounts are not immune: many families share email addresses or passwords across shopping and gaming platforms, creating a single point of failure.

Credential leaks like this one frequently cascade into account takeovers elsewhere. A password reused from a Radley purchase can give attackers access to email, social media, or your child’s gaming profile, turning a retail breach into a broader privacy incident.

The Doxxing and Identity-Chain Implications

Once internal files leave a company’s control, attackers and downstream data brokers can link your shopping handle, email, physical address, and phone number. That chain often reaches gaming accounts, family photos, and school-related logins. Public reporting shows these identity chains accelerate doxxing: one exposed record makes the next breach easier to exploit. Families who shop together or share devices face compounded risk because a single leaked email can expose every linked account.

Clop’s Publicly Known Track Record

Public reporting attributes the attack to the Clop ransomware group, which first gained widespread attention in 2019. The group is known for targeting large organizations and double-extortion tactics: it exfiltrates data before encrypting systems, then threatens to publish the stolen files unless a ransom is paid. Notable prior victims have included major corporations across healthcare, finance, and retail sectors. Clop’s typical playbook involves initial access through vulnerabilities in file-transfer software, followed by data exfiltration and publication on dedicated leak sites when victims refuse payment.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Rotate the password you used at radley.com anywhere it is reused and enable 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that chain back to the same address or email.
• Let remediation specialists handle takedown requests across data brokers and suspicious sites on your behalf.

The Radley.com incident illustrates how retail breaches continue to feed larger identity chains that can affect any family. Taking concrete steps now limits the damage from both this leak and the ones that will inevitably follow. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage including children’s gaming accounts.