Stormous Claims ESHA Research Breach and Theft of Product Data

Summary
Stormous claims it breached ESHA Research/ESHA Cloud Services and stole product-development, intellectual-property, laboratory, and consumer data. The monitoring post says the group’s claims are unconfirmed.
Key points
- A ransomware.live monitoring record attributes the claims to Stormous; the post says their accuracy is unconfirmed.
- Stormous claims it breached ESHA Research/ESHA Cloud Services and compromised core product-development databases.
- The group claims the stolen data includes product designs, manufacturing blueprints, recipes, and formulation data.
- The claim also lists laboratory, nutritional testing, allergen classification, client profile, user metric, and consumer activity data.
Article Details
- Victim
- ESHA Research / ESHA Cloud Services
- Victim Domain
- eshacloudqa.com
- Claim Date
- 2026-06-28
- Encryption Status
- Unknown; encryption is not reported.
- Exfiltration Status
- Claimed by Stormous; unverified.
- Exfiltrated Data
- Stormous claimed it obtained confidential formulation data, product designs, manufacturing blueprints, recipes, laboratory and nutritional testing data, allergen records, client profiles, user metrics, and consumer activity data.
- Leak Status
- Stormous published a breach claim; the article does not verify that data was leaked or published.
Threat Actors
Products
FoodGrouphighly confidential industry secrets and formulation data tied to SupplementFormula, PureFood, and FoodGroup.PureFoodand exfiltrating highly confidential industry secrets and formulation data tied to SupplementFormula, PureFood, and FoodGroup.SupplementFormuladatabases and exfiltrating highly confidential industry secrets and formulation data tied to SupplementFormula, PureFood, and FoodGroup.
