The Clarins Group, a luxury French skincare company, fell victim to a ransomware attack by the Everest group, which exposed the personal data of over 600,000 customers across the U.S., France, and Canada. The leaked information includes names, birth dates, addresses, phone numbers, email addresses, and purchase histories—data typically collected during online transactions or loyalty program sign-ups. While the exposed details may seem non-critical at first glance, they pose significant risks for phishing attacks, identity theft, tax fraud, and further malicious exploitation.The Everest group, active for at least four years and linked to high-profile attacks like the 2022 breach of AT&T, has not yet demanded a ransom from Clarins. However, the sheer volume of compromised records—combined with Clarins’ $2.35B annual revenue and 8,000-strong workforce—makes this a high-stakes incident. The breach underscores vulnerabilities in customer data protection, with potential cascading effects if threat actors leverage the stolen information for social engineering, financial scams, or deeper system infiltrations. Clarins’ global presence and premium brand status further amplify reputational and operational risks.