NightSpire Reports an Attack on EPK
In May 2025, the Venezuelan children’s clothing brand EPK was targeted by a ransomware attack carried out by the threat actor NightSpire. The group claimed to have stolen 27 GB of data; the attack is estimated to have occurred on May 18, 2025, and was publicly disclosed on May 19, 2025. It is unclear whether the compromised data was ultimately leaked or whether the company suffered financial losses as a result of the incident.
Overview
Missing evidence
Impact details
NightSpire included EPK on the list of ransomware or data breach victims and claimed that approximately 27 GB of data had been leaked. Public sources support the author’s claim, but no official statement, validated leaked data, evidence of encryption, service disruption, or financial losses have been found.
Classification & severity
- Category
- Malicious code
- Subtype
- Ransomware
- Confidence
- Medium
Hackmanac and Ransomware.live support a claim by NightSpire regarding the ransomware and the data leak site targeting EPK. Public evidence supports the claim, but not the encryption, the service disruption, or the authenticity of the data.
Severity assessment
Medium- Information impact
- Suspected
- Affected scope
- Organization-wide
- Critical service
- None
- Public confidence
- Limited
- Recoverability
- Extended
Public evidence supports a claim regarding the NightSpire ransomware and a data leak website targeting a private retailer, but the actual exposure of the data and the impact on the business remain unconfirmed.
Timeline
NightSpire listed EPK as an alleged victim.