Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

RevitaLash Cosmetics

revitalash.com

RevitaLash Cosmetics was listed on the Clop and Cactus leak site on Feb 18, 2025. Brandefense has recorded 2 separate claims against it. Information as of Oct 19, 2026.

Country: United StatesIndustry: Retail
Updated continuously · figures as of Oct 19, 2026
Claimed by
Clop, Cactus
First listed
Feb 18, 2025
Claims recorded
2

2 Leak-Site Claims.

ClopConfirmed claim
Posted on the leak site
Feb 27, 2025
Collected by Brandefense
Jul 11, 2025
Data claimed
Not stated
Leak-site post text, written by the group
Revitalash.com is a cosmetics company renowned for its award-winning eyelash, eyebrow, and hair beauty enhancement products. Established by Dr. Michael Brinkenhoff to help his wife feel beautiful during her battle with breast cancer, Revitalash aims to restore and enhance natural beauty. The products are celebrated for their responsible formulation, enhanced by scientifically-advanced technology and natural botanicals.
CactusConfirmed claim
Posted on the leak site
Feb 18, 2025
Collected by Brandefense
Jul 11, 2025
Data claimed
1.2 TB
Leak-site post text, written by the group
cosmetics. “athena cosmetics, inc. is committed to the belief that it’s continuing business success is built upon the manufacture and sale of safe, reliable, quality products, combined with uncompromised integrity and the spirit of philanthropy. as a company, we embrace and pass these values on to our customers, employees and partners.” website: [removed] revenue: $21.5m address: 23000 avalon blvd, carson, california, 90745, united states phone number: [removed] download link #1: [removed] mirror: [removed] data descriptions: personal identifiable information (both customers and employees)…

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
ALDOGROUP.COM(ALDOSHOES.COM)
aldogroup.com
ClopCACanadaRetailNot stated
SUUNTO.CN(SUUNTO.COM)
suunto.cn
ClopFIFinlandTechnologyNot stated
SMAPCENTER-UAH.EDU
smapcenter-uah.edu
ClopESSpainEducation and ResearchNot stated
DAD-CO.TH
dad-co.th
ClopTHThailandUnknownNot stated
CLOUD-CLEARWAYGROUP.COM
cloud-clearwaygroup.com
ClopUnknownUnknownNot stated
HODERO-HOLDINGS-LTDClopCACanadaUnknownNot stated
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
Grupo Cronica
grupocronica.com.ar
QilinARArgentinaRetailNot stated
Belcorp
belcorp.biz
QilinPEPeruRetailNot stated
Quikrete
quikrete.com
HelixUSUnited StatesRetailNot stated
Pure Options
pureoptions.com
PlayUSUnited StatesRetailNot stated
Verano Holdings
verano.com
The-seven-deadly-sinsUSUnited StatesRetail2.4 MB
Segres Systec
segres.com
QilinPEPeruRetailNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.