www.anubis-cosmetics.com Listed by Kraken Ransomware Group

On April 2, 2025, Spanish cosmetics company Anubis Cosmetics, S.L. appeared on the leak site of the Kraken ransomware group, with attackers claiming to have exfiltrated internal files after a ransomware incident.

What Public Reporting Shows

Public reporting indicates the company’s data was posted to a dark web onion address operated by the group. The listing states that internal files were taken during a ransomware attack, although the exact number of people affected remains unknown. Available reporting describes the exposed material as internal company documents rather than a specific list of customer records, but any breach of this nature can still place personal information linked to employees, vendors, or customers at risk.

April 2, 2025 marks the public disclosure date on the Kraken leak site. The incident follows the group’s typical pattern of encrypting victim systems, exfiltrating data, and then publishing samples or full datasets when demands are not met.

Why This Matters for You and Your Family

When a company that handles orders, payments, or customer accounts is breached, the information it stores about you can end up in the hands of criminals. Even if you only bought a gift set or registered for an online promotion, your name, email, shipping address, or partial payment details may have been inside the compromised files. Once that data leaves the company’s control, it can be sold, traded, or used to build profiles that make identity theft or targeted scams easier.

Internal files often contain spreadsheets, customer databases, or employee records that link names to contact information. For families, this risk extends beyond one person: a parent’s purchase tied to a home address can expose everyone living there.

The Doxxing and Identity-Chain Risk

Credential leaks and internal documents frequently serve as the first link in longer doxxing chains. An email address taken from one breach can be tested against gaming platforms, social media, or shopping accounts. If the same password was reused, or if the address appears in multiple places, attackers can map your online handles back to your real identity and physical location. Public reporting shows these chains often lead to harassment, account takeovers, or attempts to extort individuals directly.

Gaming accounts belonging to you or your children are especially vulnerable because they frequently share email addresses or phone numbers with shopping profiles. A single leak like this one can cascade into unauthorized access across services that store chat logs, payment methods, or location data.

Kraken Ransomware Group’s Track Record

Public reporting attributes the Kraken ransomware group with operations that emerged in recent years, focusing on mid-sized businesses across Europe and North America. The group is known for encrypting networks, exfiltrating sensitive files, and then pressuring victims through public leak sites when ransom demands go unpaid. Notable prior victims have included companies in manufacturing, retail, and professional services sectors, though exact details vary by incident. Their typical playbook involves initial access through common vulnerabilities or phishing, followed by data theft and extortion that combines technical encryption with the threat of public disclosure.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what this claimed breach connects to.
• Rotate any password you used at Anubis Cosmetics or similar shopping sites, then enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your family is caught and addressed in hours instead of months.
• Cover the household with DoxxScan family protection that includes dependents and children’s gaming accounts, which often chain back to the same addresses and emails exposed in retail breaches.
• Let DoxxScan remediation specialists handle takedown requests and broker removals for you while you focus on securing accounts at home.

The reality is that breaches like the one at Anubis Cosmetics will continue as long as companies store personal data. Taking concrete steps now limits how far criminals can travel down the identity chain that starts with this incident. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with coverage that protects your entire household including children’s gaming accounts.