Kraken ransomware group lists www.anubis-cosmetics.com on its leak site

• Ransomware group: Kraken
• Country: Spain
• Sector: Retail & E-Commerce
• Announcement date: June 28, 2025

Kraken claims access to Anubis Cosmetics data

The threat actor group known as Kraken has officially listed ANUBIS COSMETICS, S.L. on its dedicated leak site. Operating under the domain www.anubis-cosmetics.com, the organization has been targeted in what the group claims is a successful data breach. This announcement marks a significant development for the retail and e-commerce sector in Spain, as the group asserts it has gained unauthorized access to the company's internal information.

The listing was published on the group's platform on June 28, 2025. According to the information provided by the threat actors, the incident may have originated much earlier, with the group referencing a date of April 2, 2025, regarding the potential attack. This gap between the claimed attack date and the public announcement is a common occurrence in ransomware operations, where attackers may spend months exfiltrating data or negotiating before making a public disclosure.

Details of the alleged breach

Despite the public listing, the group has been notably vague regarding the specifics of the incident. At this time, no details regarding the nature of the leaked or threatened data have been provided. The information available from the group's announcement is limited to the company name and the primary domain, with the provided screenshot containing only these identifiers.

The listing names no specific data types that have been compromised. Because the group has not released a file list or specified the volume of information stolen, the exact scope of the breach remains unknown to the public.

About Anubis Cosmetics

Anubis Cosmetics is a Spanish-based beauty company that specializes in the development and manufacture of professional skincare and cosmetic products. The organization serves a specific niche within the beauty industry, offering a wide range of products that are designed specifically for use in aesthetic and beauty centers. As a player in the retail and e-commerce sector, the company manages various digital and physical operations to supply professional centers with their specialized cosmetic lines.

Potential risks and industry implications

The potential exposure of the organization's data may lead to the disclosure of personal information belonging to customers and employees. For a company operating within the European Union, such a breach carries significant weight; as the company is based in Spain, a potential data breach could result in legal consequences under the GDPR (General Data Protection Regulation). The regulatory framework in Europe imposes strict requirements on how companies must protect and report the loss of personal data.

Beyond the immediate legal and regulatory concerns, there are significant secondary risks associated with such leaks. The stolen information could be utilized by malicious actors for identity theft or for conducting highly targeted phishing attacks against the company's clients or staff. In the e-commerce and retail sectors, where consumer trust is paramount, such incidents can have lasting impacts on brand reputation.

While public information about the Kraken group remains limited and their specific methods remain uncertain, this incident highlights the ongoing risks faced by the retail sector. Organizations in this space often implement defensive measures such as multi-factor authentication, regular security audits, and robust encryption to mitigate these threats. Ransomware groups typically utilize double extortion tactics, where they not only encrypt systems but also threaten to leak sensitive data to pressure the victim into paying a ransom. This dual-threat approach increases the complexity of incident response for modern enterprises.