🇺🇸
#USA Consumer & Supplement Industry Breach Alert
NutraBio (
nutrabio.com), a US-based sports nutrition and dietary supplement manufacturer, has allegedly been listed on a cybercrime forum following claims of a 93GB corporate and customer data leak.
According to the post, the threat actor claims the compromise involved:
• Exploitation of an SAP vulnerability in the ERP environment
• Stolen administrative credentials without MFA enforcement
• Lateral movement using Cobalt Strike
• Full compromise of internal SharePoint and e-commerce systems
The exposed data may include:
• Customer names, emails, phone numbers, and addresses
• Payment and credit card authorization data
• Internal financial records and accounting documents
• Employee HR and payroll information
• Executive email archives and communications
• Proprietary supplement formulations and recipes
• Laboratory reports and quality control documents
• Vendor contracts and legal agreements
• Customer complaint and adverse reaction reports
• Database connection strings and API keys
The dataset appears to relate to NutraBio’s customer operations, manufacturing processes, laboratory testing, corporate communications, and internal product development environments.
If authentic, potential risks may include:
• Exposure of customer financial and personal information
• Identity theft and targeted phishing attacks
• Intellectual property theft involving supplement formulations
• Corporate espionage targeting manufacturing processes
• Legal and regulatory exposure tied to product testing data
• Supply chain compromise attempts involving vendors and partners
The post also references internal emails, formulation discussions, laboratory analysis documents, and customer complaint records allegedly tied to supplement production and quality assurance operations.
The authenticity of the claims and the scope of the alleged compromise have not yet been independently verified.
#DataBreach #CyberSecurity #USA #InfoSec #DataLeak #Privacy #BreachAlert #SupplyChain #ConsumerData