Cybercriminal Group Everest Claims Massive Data Breach at Clarins

The infamous Everest ransomware group claims to have successfully infiltrated the internal network of French luxury skincare brand Clarins Group and stole the sensitive personal data of 600,000 customers.

 

Clarins is a family-owned French multinational company that manufactures and sells skincare, makeup, and fragrance products, with a strong focus on plant-based ingredients and a holistic approach to beauty and well-being.

 

The Everest ransomware group recently claimed responsibility for breaching the internal network of Clarins, listing the French skincare company as a victim on the dark web. The group claimed that it had obtained confidential data from the company and, to support its claims, shared samples of the stolen information.

 

 

 

The threat actors claimed to have obtained the personal details of over 600,000 Clarins customers. According to the cybercriminals, the stolen data includes information on customers based in the USA, France, and Canada.

 

The Cybernews research team investigated the attackers’ dark web post and found that, so far, only a few screenshots have been shared as evidence of the alleged data breach. These images appear to display a sample of a database containing end-user information, including names, dates of birth, addresses, phone numbers, and email addresses.

 

The hacker group also disclosed data from two additional databases. The exposed information includes typical user details collected by online retailers, such as purchase histories across various categories, including skincare and makeup.

 

Clarins has yet to respond to the claims made by the Everest ransomware group. The cyber criminals have also not revealed whether a ransom has been demanded or if any communication has taken place with the French skincare brand.