Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

ANUBIS · Threat actor profile

// THREAT ACTOR

ANUBIS_

Active

ANUBIS is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of ANUBIS — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

103 Victims tracked
2 / 2 Active mirrors
2025-02-25 First listing
2026-08-03 Most recent

Victims by year

  • 2026 61
  • 2025 42

Leak site mirrors

2 mirrors tracked, 2 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion Captcha snapshot · 2026-08-06 21:18
  • anubisyfkh5rixydjpoo3jqucauajz2juybrbtuglcppjj2y3eg3y6ad.onion Captcha snapshot · 2026-08-06 21:35

Recent victims

The 50 most recent victims claimed by ANUBIS. Total in the index: 103.

Date listed Victim Description
2026-08-03 Winn-Dixie Inside a multibillion-dollar retail giant.
2026-08-03 BLACKBURN'S Major home healthcare provider data breach.
2026-08-03 Cameron Regional Medical Center Patient and employee data breach at a healthcare provider.
2026-07-28 Prelys Courtage Client data breach at a major mortgage brokerage franchise.
2026-07-27 Coca-Cola / Fairlife Major data breach at company owned by Coca Cola.
2026-07-23 Eagle Crest Communities Patient and employee data breach at elderly care service.
2026-07-20 Bath Fitter Employee data breach at a major manufacturing company.
2026-07-20 Fairlife / Coca-Cola www.fairlife.com
2026-07-13 Boston Orthotics, Inc. Patient data breach at yet another negligent clinic.
2026-07-13 Casper Orthopedics Orthopedic clinic patients' data and medical records exposed.
2026-07-13 Surtifamiliar Passports of supermarket chain employees.
2026-07-13 Community Advocates Law firm clients' personal data exposed.
2026-07-03 Ferrum AG Data breach at one of the largest family-owned manufacturing businesse…
2026-07-02 Quest Healthcare Solutions Employee data, internal files, and a few unexpected discoveries.
2026-07-02 Northeast Pediatrics & Adolescent Medicine Data breach exposes employees and patients of a pediatric clinic.
2026-06-29 ESMS Global Limited Medical information services data breach.
2026-06-29 Boston Orthotics & Prosthetics Patient data breach at yet another negligent clinic.
2026-06-25 Nachlass Nord Inheritance lawyers expose IDs, estate records, and client data.
2026-06-25 Quest Health Solutions Employee data, internal files, and a few unexpected discoveries.
2026-06-19 KTR Real Estate Advisors Real estate client database exposed.
2026-06-15 KoMiCo Inside the internal data of a publicly traded company.
2026-06-14 Power & Tel Data breach exposes ecommerce platforms’ dirty laundry.
2026-06-14 EXCEED Energy Data breach at an international well management specialist.
2026-06-14 Singing River Health System New data breach at a large health system provider.
2026-06-14 D&M Contractors A small breach, real employee data.
2026-06-14 FÉTIS Group & SECOM Engineering Data breach at an engineering company. Financial records, project deta…
2026-05-19 Colorado Dental Wellness Center Clients’ medical data breach.
2026-05-19 A.R.Ge.Co Accounting firm data breach.
2026-04-23 Tractial A small but substantial data breach at a fintech company.
2026-04-23 Marnell Financial Services Data breach at financial company.
2026-04-21 Samuel I. White, PC Significant breach at a law firm.
2026-04-21 ViaQuest Large-scale data breach at a care provider for seriously ill patients.
2026-04-09 Signature Healthcare Will there be a release? Keep an eye on the timer.
2026-04-07 Star Fuels Data breach at a small fuel company.
2026-04-06 Tesla Systems Careless IT contractor jeopardizes client security.
2026-04-04 Shine Aviation Aviation firm data breach.
2026-04-01 Publishers Clearing House The fall of a sweepstakes giant.
2026-03-27 Schlam Stone & Dolan LLP Data breach at a law firm representing clients ranging from government…
2026-03-27 Scalian Data breach at a major french IT company.
2026-03-13 KLA Laboratories How a single data breach exposed contracts, credentials, and critical …
2026-03-10 L. S. King and Associates www.cpageorgia.com - accounting firm data breach. Small dataset, big c…
2026-03-10 A J Taylor Electrical Data breach at electrical installation company: drawings, tenders, and…
2026-03-07 Ladue Family Dental A major leak of smiles.
2026-03-03 Andal Law Group Injury accident law firm data breach: driver IDs and other personal da…
2026-03-02 AkzoNobel Data breach at leading global paints and coatings company.
2026-02-26 Physicians Clinic of Iowa Clinic data breach: another example of negligence in a medical institu…
2026-02-26 Envirogen Technologies Major data breach of Engineering firm with high-profile clients.
2026-02-21 Micaforce Technology Data breach involving the cloud provider's clients.
2026-02-18 IFL Group Data breach at an Air Transportation Company.
2026-02-13 Samkwang Insider Information about Samsung and Other South Korean Tech Companie…

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.