What Happened
On April 20, 2026, US supplement manufacturer NutraBio (nutrabio.com) was listed as a victim of the Everest ransomware group, which claimed to have compromised the company’s systems and stolen sensitive internal data, threatening to publish it if negotiations were not initiated. BreachSense reports the incident as a data breach involving NutraBio with a reported leak size of 93 GB, indicating a large volume of exfiltrated information, though specific data types (such as customer PII, payment data, or employee records) and exact record counts have not been publicly detailed. Public reporting and ransomware tracking sites characterize this as a ransomware-enabled data exfiltration event against NutraBio’s infrastructure rather than a simple website compromise, and law firms have already announced investigations into a potential class action over the exposure of personal information, implying that at least some consumer or employee data may be involved.
