FullBeauty Brands listed on Everest ransomware leak site

• Ransomware group: Everest
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: November 13, 2025

FullBeauty Brands targeted by Everest ransomware group

The Everest ransomware group has officially listed FullBeauty Brands on its dedicated leak site. According to the announcement made on November 13, 2025, the threat actors claim to have successfully exfiltrated and published data allegedly belonging to the American retail and e-commerce company. This development marks a significant escalation in the pressure exerted by the group against the organization.

Details of the alleged data leak

The Everest group has stated that the publication of the alleged data was a direct consequence of the company's failure to respond to their demands within a specified deadline. The threat actors have asserted that the information has not only been posted on their primary leak site but has also been duplicated across various other hacker forums and leak sites, increasing the visibility of the breach.

Regarding the specific contents of the breach, the available information remains limited. The group provided screenshots indicating that the data was shared via downloadable links organized into three separate parts, labeled FBpart1, FBpart2, and FBpart3. However, the listing does not provide a detailed list regarding the specific type of leaked data, and no specific file count or data size has been disclosed by the group.

The organization involved

FullBeauty Brands is an American e-commerce and retail company that specializes in plus-size apparel for both women and men. The company operates a diverse portfolio of various brands and is known for offering a wide range of fashion and lifestyle products within inclusive sizing.

Risk assessment and industry implications

This incident poses several secondary risks that could impact the ecosystem surrounding FullBeauty Brands. For the company's customers and employees, the leaked information could potentially be utilized for identity theft or targeted phishing attacks. Furthermore, because the company is based in the United States, this incident may trigger legal processes under state-level data breach notification laws and other relevant regulatory frameworks.

The Everest group, which has been known to be active since 2020, is recognized for employing data exfiltration and extortion methods to pressure their targets. Given their established history of activity, it is likely that the allegedly leaked data will be utilized by other cybercriminal actors in the future. This creates a ripple effect of risk that extends beyond the immediate target, potentially creating indirect risks for the company's supply chain partners.

For organizations operating within the retail and e-commerce sectors, such incidents highlight the critical importance of robust data protection strategies. Ransomware groups often utilize a