09-05-26, 03:32 PM
(This post was last modified: 09-05-26, 03:34 PM by Xxxxdxdxdxdddxxdxxdd.)
Hello DarkForums.
The countdown timer is up. No deal was made. No payment was sent.
So today, I am uploading the complete data extraction from NutraBio (nutrabio.com) – United States-based premium sports nutrition and dietary supplement manufacturer. Over 93GB of uncompressed corporate intelligence, customer databases, internal communications, lab reports, and sensitive operational data.
What we hit:
- Unpatched SAP vulnerability (CVE-2025-0193) in their ERP system
- Stolen admin credentials from infostealer logs (no MFA enforcement)
- Lateral movement via Cobalt Strike to their document management and customer databases
- Full compromise of their e-commerce platform and internal SharePoint
Database Info:
- Platform: Corporate Network / SAP ERP + Microsoft SharePoint
- Organization: NutraBio Labs, Inc.
- Domain: nutrabio.com
- Country: USA (Middlesex, New Jersey)
- Total Leak Size: ~380 GB raw (multiple victims), NutraBio portion compressed to 93GB .rar
- Ransomware Group: EVEREST
- Date of Attack: April 20, 2026 (public claim)
- Threat Actor Statement: "We have obtained sensitive data from NutraBio. If no negotiations are initiated, the full leak will be published soon."[reference:0]
Compromised Data – NutraBio Portion (93GB):
- Customer database: Full names, emails, physical addresses, phone numbers – over 500,000 unique records
- Unencrypted credit card authorization forms: Full card numbers, CVV codes, expiration dates, billing addresses[reference:1]
- Corporate financials: General ledgers, budgets, tax declarations, profit margins
- Complete employee directory: PII including W-9 forms and payroll data
- Corporate email archives (.pst files) of C-suite and key executives
- Internal product formulations and proprietary supplement recipes (unredacted)
- Third-party lab reports: Raw ingredient certificates of analysis (COA), quality control documents
- Customer complaint database: Adverse event reports, supplement reaction logs (potential legal exposure)
- Vendor and distributor NDAs: Legal agreements with manufacturing partners
- Website source code backup, including database connection strings and API keys
Sample Data (representative intelligence):
- The leaked data contains **confirmed PII** of over 250,000 individuals, including SSN/TIN data cross-referenced in the full 380GB release[reference:2].
- Internal product formulations reveal specific deviations from labeled ingredients. Legal exposure includes potential false advertising claims.
- Customer complaint logs include serious incident reports (alleged adverse reactions). This data is highly valuable for plaintiffs' attorneys.
Why this matters:
- 93GB of unredacted corporate and customer data
- Unencrypted payment card data = direct fraud risk for customers
- Proprietary supplement formulas = intellectual property theft, competitors will eat this up
- Internal quality control failures = class-action lawsuit goldmine
Deliverables:
Download:
Files: https://t.me/+Lv3LYdpVyJc5ZTM0
Vouch center: https://t.me/+wuOFH81f2us1YmQ0
Website: https://xorcat.deals/
The countdown timer is up. No deal was made. No payment was sent.
So today, I am uploading the complete data extraction from NutraBio (nutrabio.com) – United States-based premium sports nutrition and dietary supplement manufacturer. Over 93GB of uncompressed corporate intelligence, customer databases, internal communications, lab reports, and sensitive operational data.
What we hit:
- Unpatched SAP vulnerability (CVE-2025-0193) in their ERP system
- Stolen admin credentials from infostealer logs (no MFA enforcement)
- Lateral movement via Cobalt Strike to their document management and customer databases
- Full compromise of their e-commerce platform and internal SharePoint
Database Info:
- Platform: Corporate Network / SAP ERP + Microsoft SharePoint
- Organization: NutraBio Labs, Inc.
- Domain: nutrabio.com
- Country: USA (Middlesex, New Jersey)
- Total Leak Size: ~380 GB raw (multiple victims), NutraBio portion compressed to 93GB .rar
- Ransomware Group: EVEREST
- Date of Attack: April 20, 2026 (public claim)
- Threat Actor Statement: "We have obtained sensitive data from NutraBio. If no negotiations are initiated, the full leak will be published soon."[reference:0]
Compromised Data – NutraBio Portion (93GB):
- Customer database: Full names, emails, physical addresses, phone numbers – over 500,000 unique records
- Unencrypted credit card authorization forms: Full card numbers, CVV codes, expiration dates, billing addresses[reference:1]
- Corporate financials: General ledgers, budgets, tax declarations, profit margins
- Complete employee directory: PII including W-9 forms and payroll data
- Corporate email archives (.pst files) of C-suite and key executives
- Internal product formulations and proprietary supplement recipes (unredacted)
- Third-party lab reports: Raw ingredient certificates of analysis (COA), quality control documents
- Customer complaint database: Adverse event reports, supplement reaction logs (potential legal exposure)
- Vendor and distributor NDAs: Legal agreements with manufacturing partners
- Website source code backup, including database connection strings and API keys
Sample Data (representative intelligence):
Quote:Quote:
- Credit Card Auth Form: Cardholder: [REDACTED] – PAN: ************* – CVV: *** – Expiry: 12/2025 – Billing Address: 8901 Park Ave, Middlesex, NJ
- Vendor NDA: Between NutraBio and ChemiNutra Inc. – Effective: 2024-09-15 – Pricing schedules attached
- Customer Record: 45-year-old male, Ohio – Email: ****@gmail.com – Phone: 740-***-**** – Lifetime purchase history: $4,892 – Pre-workout, protein, BCAAs
- Internal Email (Sales Director): "We need to backorder the new pre-workout blend. Ingredient X failed COA. Let's use alternative supplier but keep packaging."
- Product Formulation: Whey Protein Isolate batch formula – exact gram weights, flavoring agents, preservatives
- The leaked data contains **confirmed PII** of over 250,000 individuals, including SSN/TIN data cross-referenced in the full 380GB release[reference:2].
- Internal product formulations reveal specific deviations from labeled ingredients. Legal exposure includes potential false advertising claims.
- Customer complaint logs include serious incident reports (alleged adverse reactions). This data is highly valuable for plaintiffs' attorneys.
Why this matters:
- 93GB of unredacted corporate and customer data
- Unencrypted payment card data = direct fraud risk for customers
- Proprietary supplement formulas = intellectual property theft, competitors will eat this up
- Internal quality control failures = class-action lawsuit goldmine
Deliverables:
Quote:- `nutrabio_everest_93gb.rar` – 93GB compressed archive
- Folder structure broken down:
- `/customer_data/credit_cards/` – unencrypted authorization forms
- `/financial/budgets_2025-2026/` – xlsx, .docx files
- `/emails/csuite/` – .pst archives
- `/formulations/proprietary/` – proprietary supplement formulas
- `/lab_reports/failures/` – failed COA records
- `/legal/ndas/` – contracts with vendors
Download:
Files: https://t.me/+Lv3LYdpVyJc5ZTM0
Vouch center: https://t.me/+wuOFH81f2us1YmQ0
Website: https://xorcat.deals/
