21stcenturyvitamins.com Listed by lockbit3 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On May 10, 2024, the website 21stcenturyvitamins.com appeared on a listing associated with the lockbit3 ransomware group. Public details indicate that internal files were claimed to have been exfiltrated in a ransomware attack, though the number of people affected remains unknown and broader confirmation of the incident has not been independently established beyond the group's own statements.

This matters because 21st Century Vitamins is described in the listing as one of the largest international manufacturers of dietary supplements. Any exposure of internal material from such an organisation can create lasting risks for employees, partners and customers whose information may have been involved, even when exact contents stay unconfirmed.

Breaking down the breach

The available record shows that lockbit3 listed 21stcenturyvitamins.com on or around May 10, 2024. The group asserted that internal files had been taken during a ransomware attack and pointed to a mega.nz folder as evidence of material already obtained. In the accompanying statement the group wrote that it possessed “a lot more from 21st Century Vitamins,” invited contact “for a deal,” and warned that the remaining material would be published “after week.” No independent verification of the volume of data, the precise date of intrusion, the method of entry, or the total number of affected individuals has been released in the public facts. Scale and technical details therefore remain undisclosed.

Inside lockbit3

Lockbit3 is a well-documented ransomware operation that has operated for several years under the broader LockBit brand. The group typically gains access to networks, encrypts systems, and exfiltrates data before posting victims on a leak site if a ransom is not paid. Its model relies on double extortion: the threat of public release is used to pressure organisations into negotiating. Prior public activity has included listings of companies across manufacturing, logistics, professional services and other sectors. In this case the listing itself constitutes a claim by the group; nothing in the supplied facts states that lockbit3 successfully encrypted systems at 21stcenturyvitamins.com or that any ransom demand was met or refused. The group’s statements about the volume of data and the one-week publication deadline should therefore be treated as unverified assertions.

About 21stcenturyvitamins.com

21stcenturyvitamins.com is the online presence of 21st Century Vitamins, identified in the lockbit3 listing as a major international manufacturer of dietary supplements. Companies in this sector formulate, produce and distribute vitamins, minerals and related health products to retailers and consumers worldwide. They routinely maintain records covering product formulations, supply-chain partners, employee information, customer orders, quality-control documentation and regulatory filings. A breach involving such an organisation is consequential because the data can include both commercially sensitive material and personal information belonging to staff, distributors or end users. Even limited internal files can reveal operational details that competitors or malicious actors might exploit, and any personal data present can expose individuals to further risk.

The information in question

The facts state only that “internal files” were exfiltrated. No further breakdown of file types, record counts or specific categories of personal data has been disclosed. Organisations that manufacture dietary supplements typically hold employee personnel files, vendor contracts, product specifications, shipping records and customer contact details. Whether any of those categories were among the files claimed by lockbit3 is unconfirmed. Readers should therefore treat the exact contents as unknown pending additional public reporting or official statements from the company.

What's at stake

For individuals whose information may have been present, the primary risks include identity misuse, targeted phishing that references legitimate business relationships, and potential exposure of contact or employment details. For the organisation the stakes include operational disruption, possible regulatory scrutiny if personal data were involved, reputational damage among retailers and consumers, and the ongoing uncertainty created by any remaining unpublished material. Because the number of people affected is unknown and the precise data types are unconfirmed, the full extent of harm cannot yet be measured. The group’s threat to publish additional files after a short deadline adds time pressure but does not itself prove that further releases have occurred or will occur.

If your data was in this claimed breach

Anyone who has worked for, supplied or purchased from 21st Century Vitamins should monitor financial and email accounts for unusual activity, enable multi-factor authentication where available, and treat unsolicited messages that reference the company with caution. Changing passwords on related accounts and reviewing credit reports for unexpected inquiries are prudent early steps. Because the exact scope remains unclear, readers can also run a free exposure scan of their email address to check whether their information has already appeared in known breach data sets. Official updates from the company, if issued, should be followed for any further guidance.

AICompiled with AI assistance from public sources and published under our editorial standards.