Ransom! Elgon Cosmetic (FEB-2026)

Spacebears claims to have targeted Elgon Cosmetic in Italy, exfiltrating sensitive data including company financial reports, medical records, personal user data, product formulas, and customer data. Elgon Cosmetic is an Italian-founded company established in 1970, with details available at https://elgoncosmetic.com #Italy

Incident Details

  • Victim: Elgon Cosmetic
  • Sector: Consumer Services
  • Country: IT
  • Actor: spacebears
  • Source: http://5butbkrljkaorg5maepuca25oma7eiwo6a2rlhvkblb4v6mf3ki2ovid.onion/companies/119/elgon-cosmetic
  • Discovered: 2026-02-18 15:51:36.826386
  • Published: 2026-01-20 00:00:00.000000

Information

  • Founded in 1970 in Italy; established as a leading manufacturer of professional hair care products for salons worldwide
  • Continuously grows and improves products while staying aligned with the latest beauty industry trends
  • Company financial reports
  • Medical records
  • Personal user data
  • Product formulas
  • Customer data
  • https://elgoncosmetic.com

Disclaimer: This post is based on public claims made by the ransomware group "spacebears". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live