LowBreach / campaignMonitoring
Qilin ransomware group claims CMD Naturkosmetik on its leak site
The Qilin ransomware group lists CMD Naturkosmetik on its leak site, unconfirmed; partners should watch for an official notice from the company.
- Published
- Ecosystem
- Enterprise software
- Exploitation
- No, only a leak-site listing reported by a claim tracker, not confirmed by the company
What happened
The Qilin ransomware group claims CMD Naturkosmetik as a victim on its leak site. This comes from a headline by the claim tracker RansomLook, dated 2026-11-01.
A listing on a leak site is a claim, not proof. CMD Naturkosmetik has not confirmed an incident, and no independent outlet has verified it. The entry point, what data was involved, how much data and whether any data was published are not confirmed. We could not review the full article, so this advisory relies on the headline alone.
Am I affected?
Not confirmed. The available headline does not name affected systems, data types or people.
What to do now
- Watch for an official statement or breach notification from CMD Naturkosmetik.
- If you exchange data or credentials with the company, treat unexpected messages that claim to come from it with care until it confirms what happened.
- Check this advisory for updates if independent reporting appears.