Ransomware Group intelligence
Anubis
ActiveTrack Anubis with 108 published victims and 1 known leak locations in a single intelligence view.
Overview
Anubis is tracked by Breach House as a ransomware group with 108 published victims.
United States is currently the most targeted country in this dataset.
1 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (1)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (108)
Search, filter and paginate the victim timeline for Anubis. Showing 1–100 of 108.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Casper Orthopedics id30508 View details | United States | Healthcare / Medicine | ||
|
Casper Orthopedics is a healthcare organization based in the US, specializing in orthopedic care and services. The company operates in the medicine sector, providing various medical offerings to patients. Casper Orthopedics was listed as a ransomware victim associated with anubis. |
|||||
| Ransomware | Casper Orthopedics id30508 View details | United States | Healthcare / Medicine | ||
|
Orthopedic clinic patients' data and medical records exposed. |
|||||
| Ransomware | Surtifamiliar id30509 View details | Other | |||
|
Surtifamiliar operates in the other sector, providing various offerings. The entity is likely to be a company or organization, given its name and sector. Surtifamiliar was listed as a ransomware victim associated with anubis |
|||||
| Ransomware | Surtifamiliar id30509 View details | Other | |||
|
Passports of supermarket chain employees. |
|||||
| Ransomware | Surtifamiliar id30509 View details | Colombia | Other | ||
|
Passports of supermarket chain employees. |
|||||
| Ransomware | Community Advocates id30510 View details | United States | NGOs / Associations | ||
|
Community Advocates is a US-based non-governmental organization operating in the NGOs and Associations sector, providing various services to the community. The organization is involved in advocacy efforts, supporting community development and social causes. Community Advocates was listed as a ransomware victim associated with anubis. |
|||||
| Ransomware | Community Advocates id30510 View details | United States | NGOs / Associations | ||
|
Law firm clients' personal data exposed. |
|||||
| Ransomware | Ferrum AG id30238 View details | Switzerland | Manufacturing / Engineering | ||
|
Ferrum AG is a company based in Switzerland, operating in the manufacturing and engineering sector. The company likely offers various products and services related to metal processing and engineering, given its name and sector. Ferrum AG was listed as a ransomware victim associated with anubis |
|||||
| Ransomware | Ferrum AG id30238 View details | Switzerland | Manufacturing / Engineering | ||
|
Data breach at one of the largest family-owned manufacturing businesses in Switzerland. |
|||||
| Ransomware | Quest Healthcare Solutions id30225 View details | United States | Healthcare / Pharma | ||
|
Quest Healthcare Solutions is a healthcare company based in the US, operating in the healthcare and pharmaceutical sector. The company provides various healthcare solutions and services. Quest Healthcare Solutions was listed as a ransomware victim associated with anubis |
|||||
| Ransomware | Quest Healthcare Solutions id30225 View details | United States | Healthcare / Pharma | ||
|
Employee data, internal files, and a few unexpected discoveries. |
|||||
| Ransomware | Northeast Pediatrics & Adolescent Medicine id30220 View details | United States | Healthcare / Medicine | ||
|
Northeast Pediatrics & Adolescent Medicine is a healthcare service provider located in the US, offering medical care to pediatric and adolescent patients. The entity operates within the healthcare sector, providing essential medical services to its community. Northeast Pediatrics & Adolescent Medicine was listed as a ransomware victim associated with anubis |
|||||
| Ransomware | Northeast Pediatrics & Adolescent Medicine id30220 View details | United States | Healthcare / Medicine | ||
|
Data breach exposes employees and patients of a pediatric clinic. |
|||||
| Ransomware | ESMS Global Limited id30096 View details | United Kingdom | IT | ||
|
ESMS Global Limited is an IT company based in the United Kingdom, operating within the IT sector. The company provides various IT services. ESMS Global Limited was listed as a ransomware victim associated with anubis. |
|||||
| Ransomware | ESMS Global Limited id30096 View details | United Kingdom | IT | ||
|
Medical information services data breach. |
|||||
| Ransomware | Boston Orthotics & Prosthetics id30097 View details | United States | Healthcare / Medicine | ||
|
Boston Orthotics & Prosthetics is a US-based healthcare company specializing in orthotics and prosthetics. The company provides a range of services and products to patients in need of orthotic and prosthetic devices. Boston Orthotics & Prosthetics was listed as a ransomware victim associated with anubis. |
|||||
| Ransomware | Boston Orthotics & Prosthetics id30097 View details | United States | Healthcare / Medicine | ||
|
Patient data breach at yet another negligent clinic. |
|||||
| Ransomware | BOSTON ORTHOTICS, INC. id30253 View details | United States | Healthcare / Medicine | ||
|
Boston Orthotics, Inc. is a healthcare company based in the US, specializing in orthotics and related medical services. The company operates in the healthcare sector, providing orthotic devices and treatments to patients. Boston Orthotics, Inc. was listed as a ransomware victim associated with anubis |
|||||
| Ransomware | BOSTON ORTHOTICS, INC. id30253 View details | United States | Healthcare / Medicine | ||
|
Patient data breach at yet another negligent clinic. |
|||||
| Ransomware | Nachlass Nord id30025 View details | Germany | Other | ||
|
Nachlass Nord is an entity based in Germany, operating in the other sector. The specific activities and offerings of Nachlass Nord are not well-documented. Nachlass Nord was listed as a ransomware victim associated with anubis |
|||||
| Ransomware | Nachlass Nord id30025 View details | Germany | Other | ||
|
Inheritance lawyers expose IDs, estate records, and client data. |
|||||
| Ransomware | Quest Health Solutions id30015 View details | United States | Healthcare / Pharma | ||
|
Quest Health Solutions is a healthcare company based in the US, operating in the healthcare and pharmaceutical sector. The company provides various healthcare services and solutions. Quest Health Solutions was listed as a ransomware victim associated with anubis. |
|||||
| Ransomware | Quest Health Solutions id30015 View details | United States | Healthcare / Pharma | ||
|
Employee data, internal files, and a few unexpected discoveries. |
|||||
| Ransomware | KTR Real Estate Advisors id30004 View details | United States | Construction / Real Estate | ||
|
Real estate client database exposed. |
|||||
| Ransomware | KoMiCo id29922 View details | Other | |||
|
Inside the internal data of a publicly traded company. |
|||||
| Ransomware | FÉTIS Group & SECOM Engineering id29807 View details | France | Manufacturing / Engineering | ||
|
Data breach at an engineering company. Financial records, project details, and personal information. |
|||||
| Ransomware | Jeffrey Burr id29650 View details | United States | Other | ||
|
[www.jeffreyburr.com] |
|||||
| Ransomware | D&M Contractors id29653 View details | United Kingdom | Construction / Real Estate | ||
|
A small breach, real employee data. |
|||||
| Ransomware | Singing River Health System id29596 View details | United States | Healthcare / Medicine | ||
|
New data breach at a large health system provider. |
|||||
| Ransomware | Power & Tel id29554 View details | Telecommunications | |||
|
Data breach exposes ecommerce platforms’ dirty laundry. |
|||||
| Ransomware | EXCEED Energy id29483 View details | Other | |||
|
Data breach at an international well management specialist. |
|||||
| Ransomware | A.R.Ge.Co id29116 View details | France | Finance / Legal / Insurance | ||
|
Accounting firm data breach. |
|||||
| Ransomware | Colorado Dental Wellness Center id28393 View details | United States | Healthcare / Medicine | ||
|
Clients’ medical data breach. |
|||||
| Ransomware | Tractial id28681 View details | United Kingdom | Finance / Legal / Insurance | ||
|
A small but substantial data breach at a fintech company. |
|||||
| Ransomware | Marnell Financial Services id28682 View details | United States | Finance / Legal / Insurance | ||
|
Data breach at financial company. |
|||||
| Ransomware | Samuel I. White, PC id28719 View details | United States | NGOs / Associations | ||
|
Significant breach at a law firm. |
|||||
| Ransomware | ViaQuest id28720 View details | United States | Healthcare / Pharma | ||
|
Large-scale data breach at a care provider for seriously ill patients. |
|||||
| Ransomware | Signature Healthcare id28030 View details | United States | Healthcare / Medicine | ||
|
Will there be a release? Keep an eye on the timer. |
|||||
| Ransomware | Star Fuels id27945 View details | United Kingdom | Energy | ||
|
Data breach at a small fuel company. |
|||||
| Ransomware | Tesla Systems id27925 View details | United States | IT | ||
|
Careless IT contractor jeopardizes client security. |
|||||
| Ransomware | Shine Aviation id27886 View details | Australia | Transportation / Travel / Logistics | ||
|
Aviation firm data breach. |
|||||
| Ransomware | Publishers Clearing House id27795 View details | United States | Communication / Marketing | ||
|
The fall of a sweepstakes giant. |
|||||
| Ransomware | Schlam Stone & Dolan LLP id27614 View details | United States | Finance / Legal / Insurance | ||
|
Data breach at a law firm representing clients ranging from government institutions to Fortune 500 companies. |
|||||
| Ransomware | Scalian id27613 View details | France | IT | ||
|
Data breach at a major french IT company. |
|||||
| Ransomware | KLA Laboratories id27313 View details | United States | Construction / Real Estate | ||
|
How a single data breach exposed contracts, credentials, and critical infrastructure details. |
|||||
| Ransomware | L. S. King and Associates id27240 View details | United States | Finance / Legal / Insurance | ||
|
www.cpageorgia.com - accounting firm data breach. Small dataset, big consequences. |
|||||
| Ransomware | A J Taylor Electrical id27225 View details | United Kingdom | Healthcare / Pharma | ||
|
Data breach at electrical installation company: drawings, tenders, and other data on the healthcare and education sectors. |
|||||
| Ransomware | Ladue Family Dental id27159 View details | United States | Healthcare / Pharma | ||
|
A major leak of smiles. |
|||||
| Ransomware | Andal Law Group id26997 View details | United States | Finance / Legal / Insurance | ||
|
Injury accident law firm data breach: driver IDs and other personal data. |
|||||
| Ransomware | AkzoNobel id26966 View details | Netherlands | Other | ||
|
Data breach at leading global paints and coatings company. |
|||||
| Ransomware | Physicians Clinic of Iowa id26870 View details | United States | Healthcare / Pharma | ||
|
Clinic data breach: another example of negligence in a medical institution. |
|||||
| Ransomware | Envirogen Technologies id26857 View details | United States | IT | ||
|
Major data breach of Engineering firm with high-profile clients. |
|||||
| Ransomware | Micaforce Technology id26699 View details | China | IT | ||
|
Data breach involving the cloud provider's clients. |
|||||
| Ransomware | IFL Group id26633 View details | United States | Transportation / Travel / Logistics | ||
|
Data breach at an Air Transportation Company. |
|||||
| Ransomware | Samkwang id26476 View details | Korea, Republic of | IT | ||
|
Insider Information about Samsung and Other South Korean Tech Companies |
|||||
| Ransomware | Langley Twigg Law | Part 2 id26387 View details | New Zealand | Finance / Legal / Insurance | ||
|
Personal and Corporate data breach. |
|||||
| Ransomware | Rutherford Investment Company id26373 View details | United States | Finance / Legal / Insurance | ||
|
Data breach of real estate investment firm: financial and Personalp identification data exposed. |
|||||
| Ransomware | Abel Schillinger id26367 View details | Germany | Finance / Legal / Insurance | ||
|
Patent lawyers' data breach; Drafts and intellectual property. |
|||||
| Ransomware | Advent Aircraft Systems, Inc. id26240 View details | United States | Construction / Real Estate | ||
|
Data breach on aerospace developments. |
|||||
| Ransomware | Ashby Computers id26213 View details | United Kingdom | IT | ||
|
Ashby Computers, operating as Ashby Computer Services LLP, is an information technology and services company based in Northamptonshire, England, with its registered office in Northampton. Company and profile listings describe its work in IT consultancy, infrastructure solutions, managed IT services, server maintenance, and related support for businesses and individuals. Its stated offerings also include server, PC and laptop repairs, data, voice and fibre cabling, and other local IT support services. In threat-intelligence listings, Ashby Computers was recorded as a ransomware victim associated with anubis. |
|||||
| Ransomware | [Redacted] Ticket #1989 id26726 View details | United Kingdom | Other | — | |
|
[Redacted] |
|||||
| Ransomware | Law Offices of Thomas J Skinner, IV id26089 View details | United States | Finance / Legal / Insurance | ||
|
What problems does this law firm have besides its shitty logo? Find out in the article. |
|||||
| Ransomware | Langley Twigg Law id25810 View details | New Zealand | Finance / Legal / Insurance | ||
|
Personal and Corporate data breach. |
|||||
| Ransomware | Vitosha Park Hotel id25809 View details | Bulgaria | Hospitality / Food & Beverage / Tourism | ||
|
Employee data breach. |
|||||
| Ransomware | Copec S.A. id25497 View details | Chile | Other | ||
|
Data Breach at One of Chile's Leading Companies |
|||||
| Ransomware | Adriatic Port Authority id25496 View details | Italy | Public Sector | ||
|
www.porto.ancona.it - data breach. |
|||||
| Ransomware | About Women Ob-Gyn id25389 View details | United States | Healthcare / Pharma | ||
|
Data Breach at Gynecology Clinic. |
|||||
| Ransomware | Carbis Loadtec id25035 View details | United Kingdom | Other | ||
|
Contracts, drawings, and client contacts. |
|||||
| Ransomware | Laidley Family Doctors id25030 View details | Australia | Healthcare / Pharma | ||
|
Data breach at a clinic. |
|||||
| Ransomware | Woodglen Medical Group id25020 View details | United States | Healthcare / Pharma | ||
|
The biggest leak of boobies! |
|||||
| Ransomware | Deibel Laboratories id24961 View details | United States | Agriculture / Food | ||
|
Data breach at a U.S. food safety and quality testing laboratory. |
|||||
| Ransomware | Markham Stouffville Hospital id24800 View details | Canada | Healthcare / Pharma | ||
|
Personal data. |
|||||
| Ransomware | Beyer Law Group id24799 View details | United States | Finance / Legal / Insurance | ||
|
Data breach from Silicon Valley lawyers. |
|||||
| Ransomware | Trumbull County id24467 View details | United States | Public Sector | ||
|
The Internal Story of a County in the State of Ohio. |
|||||
| Ransomware | Duhabex id24465 View details | Poland | Transportation / Travel / Logistics | ||
|
Data breach at a Polish international transport and logistics company. |
|||||
| Ransomware | Smith Fire Systems id24441 View details | United States | Communication / Marketing | ||
|
A company that provides comprehensive fire protection services for buildings. |
|||||
| Ransomware | Fun For Less Tours id24321 View details | United States | Other | ||
|
Customer passports and personal data. |
|||||
| Ransomware | Mid South Pulmonary & Sleep Specialists id24280 View details | United States | Healthcare / Pharma | ||
|
Patient data breach. |
|||||
| Ransomware | AllerVie Health id24220 View details | United States | Healthcare / Pharma | ||
|
Major customer database leak. |
|||||
| Ransomware | FSGROUP-Engineering id23988 View details | Spain | Manufacturing / Engineering | ||
|
Leakage of customer contact details. |
|||||
| Ransomware | Lung Rose Voss Wagnild id23851 View details | United States | Finance / Legal / Insurance | ||
|
Hawaii’s leading law firm data breach. |
|||||
| Ransomware | Brenda Richardson Memorial Care Home LLC id23809 View details | United States | Healthcare / Pharma | ||
|
Negligence of mental health care agency employees |
|||||
| Ransomware | Olive Branch Family Medical Center id23808 View details | United States | Healthcare / Pharma | ||
|
Data Breach at U.S. Medical Center Puts Thousands of Patients at Risk |
|||||
| Ransomware | Dermatology Associates id23647 View details | United States | Healthcare / Pharma | ||
|
Leak of clinic customer data. |
|||||
| Ransomware | Mayco International id23575 View details | United States | Manufacturing / Engineering | ||
|
Data breach at automotive industry leader. |
|||||
| Ransomware | Mayco International [www.maycointernational.com] id23557 View details | United States | Manufacturing / Engineering | ||
|
Data breach at automotive industry leader. |
|||||
| Ransomware | Goodfellow & Schuettlaw id23300 View details | Canada | Finance / Legal / Insurance | ||
|
Personal data, confidential documents, and more. |
|||||
| Ransomware | Paterson & Dowding Family Lawyers id23299 View details | Australia | Finance / Legal / Insurance | ||
|
Law firm data breach |
|||||
| Ransomware | Aussie Fluid Power id23162 View details | Australia | Energy | ||
|
An Australian engineering leader has fallen victim to a cyberattack causing a data breach. |
|||||
| Ransomware | Maine Oxy id22973 View details | United States | Finance / Legal / Insurance | ||
|
Financial data breach |
|||||
| Ransomware | Den Hartogh Logistics id22945 View details | Netherlands | Transportation / Travel / Logistics | ||
|
Data leak at one of the world's leading logistics service providers |
|||||
| Ransomware | One law firm in Canada id22861 View details | Canada | Finance / Legal / Insurance | ||
|
It seems they have decided to play silent. |
|||||
| Ransomware | DRL Group id22696 View details | India | Services | ||
|
Customer data leak |
|||||
| Ransomware | Storage King id22681 View details | Australia | Other | ||
|
Major personal data leak |
|||||
| Ransomware | Alan Shintani, Inc id22502 View details | United States | Communication / Marketing | ||
|
Photos and blueprints of government facilities. |
|||||
| Ransomware | GCC of America, inc. id22087 View details | United States | Communication / Marketing | ||
|
Data breach at one of the largest cement and concrete producers in North America. |
|||||
| Ransomware | TRAF Industrial Products Inc id21991 View details | Canada | Manufacturing / Engineering | ||
|
Data breach at an aerospace and defense contractor. |
|||||
| Ransomware | Grand Rapids Controls id21761 View details | United States | Other | ||
|
The 150 GB leak involves confidential documents and NDA agreements with companies such as Ford, Bentley, Lear, and others. |
|||||
| Ransomware | Advanced HPC id21722 View details | United States | Construction / Real Estate | ||
|
Leakage of internal documents at a company engaged in the development and implementation of HPC systems for science and defence. |
|||||
| Ransomware | Disneyland Paris id20757 View details | France | Other | ||
|
Confidential Disneyland documents. |
|||||