eternal.hk Listed by lockbit5 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

What is known is that on June 20, 2026, the ransomware group lockbit5 listed eternal.hk on its leak site, stating that internal files had been taken during a ransomware operation. No confirmation of the claim has been made public by the organisation, and the number of individuals whose information may be involved remains undisclosed. For customers, employees or business partners of a major perfume retailer, the practical concern is whether personal details, transaction records or internal communications have left the company’s control.

What happened

The listing appeared on June 20, 2026. The group stated that internal files were exfiltrated in a ransomware attack. No further details on the timing of the intrusion, the volume of data, the encryption of systems or any ransom demand have been released. Eternal Beauty Holdings Limited has not issued a public statement confirming or denying the incident.

Who is lockbit5?

LockBit is a ransomware-as-a-service operation that has been active since at least 2019. The group supplies encryption tools to affiliates who carry out intrusions, typically demanding payment for both decryption keys and a promise not to publish stolen data. It has claimed responsibility for incidents across multiple industries and countries, relying on a public leak site to pressure victims. Any specific assertion about eternal.hk originates solely from the group’s own listing and remains unverified by independent sources.

Who is eternal.hk?

Eternal Beauty Holdings Limited operates as the largest perfume group in China, including Hong Kong and Macau. Companies of this scale maintain retail networks, supply chains and customer programmes that involve the collection and storage of personal and commercial information. A successful intrusion at such a firm can expose data held across multiple jurisdictions and business functions.

The information in question

The only detail provided is that internal files were allegedly exfiltrated. No inventory of specific data categories has been published. Organisations in the retail perfume sector routinely process customer purchase histories, loyalty-programme records, employee information and supplier contracts; whether any of these categories were among the files taken in this case is not confirmed.

What's at stake

Individuals whose details appear in the exfiltrated files could face follow-on fraud attempts or unwanted contact if the material is later published or sold. The company itself may encounter regulatory scrutiny, operational disruption and loss of customer trust while it investigates and restores systems. Because the scale of exposure is unknown, the full extent of these consequences cannot yet be measured.

Were you affected?

Check any communications from Eternal Beauty Holdings Limited for official guidance. Monitor bank and loyalty accounts for unusual activity. Where available, enable multi-factor authentication on accounts that may be linked to the retailer.

• Review recent statements or emails from the company for instructions on credit monitoring or identity protection.
• Change passwords for any accounts that share credentials with eternal.hk services.
• Run a free exposure scan of your email address against known breach datasets to see whether your information has appeared in public listings.

AICompiled with AI assistance from public sources and published under our editorial standards.