FullBeauty Brands Reports Data Breach Exposing Sensitive Customer Information FullBeauty Brands, Inc., a New York-based retail apparel company specializing in plus-size clothing under brands like CUUP, ELOQUII, and Jessica London, disclosed a data breach to the Texas Attorney General on January 23, 2026. The incident involved unauthorized access to systems containing sensitive personal identifiable information (PII) and protected health information (PHI) of an undisclosed number of individuals. While specific details of the breach remain undisclosed, the exposed data may include names, contact information, financial details, and health-related records, varying by individual. FullBeauty, which employs over 1,000 people and operates additional centers in Indianapolis and El Paso, has begun notifying affected individuals. The company’s filing with the Texas Attorney General marks the first public acknowledgment of the incident, though no further technical or investigative details have been released. The breach highlights ongoing risks to consumer data in the retail sector, particularly for companies handling both PII and PHI.

FullBeauty Brands Confirms 2025 Data Breach Affecting Over 1,100 Individuals FullBeauty Brands, a major apparel company operating brands like Woman Within, Roaman’s, and ELOQUII, disclosed a data breach affecting at least 1,191 individuals after unauthorized access to its network between October 18 and November 19, 2025. The breach exposed names and Social Security numbers, with notifications sent to impacted individuals in Texas (1,185) and New Hampshire (6). The ransomware group Everest claimed responsibility for the attack, leaking the stolen data on November 24, 2025, after FullBeauty allegedly missed a ransom deadline. FullBeauty has not confirmed Everest’s involvement, and the authenticity of the leaked data remains unverified. The company is offering affected individuals one year of free credit monitoring and identity theft protection via Experian. Everest, active since 2020, has targeted high-profile victims, including NASA, the Brazilian government, and hospitals, before resurfacing in 2024 after a quiet period. In 2025 alone, the group claimed 15 confirmed ransomware attacks and 69 unconfirmed incidents, including a recent 343 GB data leak from Under Armour. The breach highlights the growing threat of ransomware against retailers, with 23 confirmed attacks on U.S. retailers in 2025 compromising over 126,000 personal records. Such attacks disrupt operations, risk data exposure, and force businesses to choose between paying ransoms or facing prolonged downtime and fraud risks. FullBeauty Brands operates in New York City, Indianapolis, and El Paso, overseeing multiple fashion and lifestyle brands.