Ransom! Xperthair

Qilin, a threat actor, has claimed to have compromised Xperthair, a well-known cosmetics retailer in the Philippines, exposing customer data including names, addresses, and purchase details. This attack highlights the potential breach of sensitive personal information for consumers in the Philippines. #Philippines

Incident Details

  • Victim: Xperthair
  • Country: PH
  • Actor: qilin
  • Source: http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/view?uuid=8a924e75-c2bb-3937-920f-a04ae3d93453
  • Discovered: 2025-08-16 05:12:41.876805
  • Published: 2025-08-16 00:00:00.000000

Information

  • Ransomware attack targeted Xperthair, a well-known cosmetics retailer in Ireland.
  • The threat actor behind the attack is identified as Qilin.
  • The compromised data includes personal information such as names, home addresses, and purchase details.
  • This incident highlights the potential risks faced by customers of Xperthair who have bought cosmetics from the company.
  • Customers are advised to be vigilant for potential data misuse or scams resulting from the breach.

Disclaimer: This post is based on public claims made by the ransomware group "qilin". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live