'Established in 1995 and based in Poole, United Kingdom, Lush is a cosmetics retailer renowned for their range of bath bombs, hair products, makeup and more. They maintain a substantial data collection of 110GB, which contains vital information awaiting upload. This archive includes significant personal documents, such as passport details, along with extensive corporate data. This corporate data encompasses areas like accounting, finance, tax, project files, and client information, all of which are maintained with a high standard of cybersecurity protocols to ensure data integrity and confidentiality.'
Ransomware Attack on Lush
- Group
- akira
- Sector
- Retail & E-Commerce
- Country
- United Kingdom
- First seen
- 26 January 2024
This is a claim published by the threat group itself and has not been independently verified. OffSet7 does not host or link to any leaked data.
Monitor your company and suppliers
Get an alert the moment a ransomware group names your company or one of your suppliers.