anubis
First seen February 25, 2025Active107 claimed victims
The claims below are reproduced as posted by anubis on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Anubis is a ransomware-as-a-service group active since December 2024 that targets healthcare, engineering, construction, and professional services sectors, offering affiliates a flexible revenue split model and an optional destructive "wipe mode" alongside standard encryption.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Marlborough Partners | September 2, 2026 | ransomlook | — |
| Caduceus Medical Group | August 28, 2026 | ransomlook | — |
| Interim HealthCare [Head office] | August 21, 2026 | ransomware_live | — |
| Scholle IPN / SIG | August 18, 2026 | ransomware_live | — |
| Interim HealthCare | August 15, 2026 | ransomware_live | — |
| Cleaver-Brooks | August 10, 2026 | ransomware_live | — |
| Winn-Dixie | August 3, 2026 | ransomware_live | — |
| Cameron Regional Medical Center | August 3, 2026 | ransomware_live | — |
| BLACKBURN'S | August 3, 2026 | ransomware_live | — |
| Prelys Courtage | July 28, 2026 | ransomware_live | — |
| Eagle Crest Communities | July 26, 2026 | ransomware_live | — |
| Fairlife / Coca-Cola | July 20, 2026 | ransomware_live | — |
| Bath Fitter | July 20, 2026 | ransomware_live | — |
| Community Advocates | July 12, 2026 | ransomware_live | — |
| Surtifamiliar | July 12, 2026 | ransomware_live | — |
| Casper Orthopedics | July 12, 2026 | ransomware_live | — |
| Ferrum AG | July 3, 2026 | ransomware_live | — |
| Northeast Pediatrics & Adolescent Medicine | July 2, 2026 | ransomware_live | — |
| Quest Healthcare Solutions | July 2, 2026 | ransomware_live | — |
| BOSTON ORTHOTICS, INC. | June 29, 2026 | ransomware_live | — |
| ESMS Global Limited | June 29, 2026 | ransomware_live | — |
| Nachlass Nord | June 25, 2026 | ransomware_live | — |
| Quest Health Solutions | June 24, 2026 | ransomware_live | — |
| KTR Real Estate Advisors | June 19, 2026 | ransomware_live | — |
| KoMiCo | June 15, 2026 | ransomware_live | — |
| FÉTIS Group & SECOM Engineering | June 11, 2026 | ransomware_live | — |
| D&M Contractors | June 5, 2026 | ransomware_live | — |
| Jeffrey Burr | June 5, 2026 | ransomware_live | — |
| Singing River Health System | June 3, 2026 | ransomware_live | — |
| Power & Tel | June 1, 2026 | ransomware_live | — |
| EXCEED Energy | May 27, 2026 | ransomware_live | — |
| A.R.Ge.Co | May 13, 2026 | ransomware_live | — |
| Colorado Dental Wellness Center | May 1, 2026 | ransomware_live | — |
| Marnell Financial Services | April 23, 2026 | ransomware_live | — |
| Tractial | April 23, 2026 | ransomware_live | — |
| ViaQuest | April 21, 2026 | ransomware_live | — |
| Samuel I. White, PC | April 21, 2026 | ransomware_live | — |
| Signature Healthcare | April 9, 2026 | ransomware_live | — |
| Star Fuels | April 7, 2026 | ransomware_live | — |
| Tesla Systems | April 6, 2026 | ransomware_live | — |
| Shine Aviation | April 4, 2026 | ransomware_live | — |
| Publishers Clearing House | April 1, 2026 | ransomware_live | — |
| Scalian | March 27, 2026 | ransomware_live | — |
| Schlam Stone & Dolan LLP | March 27, 2026 | ransomware_live | — |
| KLA Laboratories | March 13, 2026 | ransomware_live | — |
| A J Taylor Electrical | March 10, 2026 | ransomware_live | — |
| L. S. King and Associates | March 10, 2026 | ransomware_live | — |
| Ladue Family Dental | March 7, 2026 | ransomware_live | — |
| Andal Law Group | March 3, 2026 | ransomware_live | — |
| AkzoNobel | March 2, 2026 | ransomware_live | — |
| Envirogen Technologies | February 26, 2026 | ransomware_live | — |
| Physicians Clinic of Iowa | February 26, 2026 | ransomware_live | — |
| Micaforce Technology | February 21, 2026 | ransomware_live | — |
| IFL Group | February 18, 2026 | ransomware_live | — |
| Samkwang | February 13, 2026 | ransomware_live | — |
| Rutherford Investment Company | February 9, 2026 | ransomware_live | — |
| Langley Twigg Law | Part 2 | February 9, 2026 | ransomware_live | — |
| Abel Schillinger | February 8, 2026 | ransomware_live | — |
| Advent Aircraft Systems, Inc. | February 6, 2026 | ransomware_live | — |
| [Redacted] Ticket #1989 | February 4, 2026 | ransomware_live | — |
| Law Offices of Thomas J Skinner, IV | February 3, 2026 | ransomware_live | — |
| Vitosha Park Hotel | January 25, 2026 | ransomware_live | — |
| Langley Twigg Law | January 25, 2026 | ransomware_live | — |
| Adriatic Port Authority | January 14, 2026 | ransomware_live | — |
| Copec S.A. | January 14, 2026 | ransomware_live | — |
| About Women Ob-Gyn | January 8, 2026 | ransomware_live | — |
| Woodglen Medical Group | December 23, 2025 | ransomware_live | — |
| Laidley Family Doctors | December 23, 2025 | ransomware_live | — |
| Carbis Loadtec | December 23, 2025 | ransomware_live | — |
| Deibel Laboratories | December 19, 2025 | ransomware_live | — |
| Beyer Law Group | December 16, 2025 | ransomware_live | — |
| Markham Stouffville Hospital | December 16, 2025 | ransomware_live | — |
| Trumbull County | December 6, 2025 | ransomware_live | — |
| Duhabex | December 5, 2025 | ransomware_live | — |
| Smith Fire Systems | December 4, 2025 | ransomware_live | — |
| Fun For Less Tours | December 1, 2025 | ransomware_live | — |
| Mid South Pulmonary & Sleep Specialists | November 28, 2025 | ransomware_live | — |
| AllerVie Health | November 26, 2025 | ransomware_live | — |
| FSGROUP-Engineering | November 19, 2025 | ransomware_live | — |
| Lung Rose Voss Wagnild | November 13, 2025 | ransomware_live | — |
| Olive Branch Family Medical Center | November 11, 2025 | ransomware_live | — |
| Brenda Richardson Memorial Care Home LLC | November 11, 2025 | ransomware_live | — |
| Dermatology Associates | November 6, 2025 | ransomware_live | — |
| Mayco International | November 3, 2025 | ransomware_live | — |
| Mayco International [www.maycointernational.com] | November 2, 2025 | ransomware_live | — |
| Paterson & Dowding Family Lawyers | October 23, 2025 | ransomware_live | — |
| Goodfellow & Schuettlaw | October 23, 2025 | ransomware_live | — |
| Aussie Fluid Power | October 16, 2025 | ransomware_live | — |
| Maine Oxy | October 11, 2025 | ransomware_live | — |
| Den Hartogh Logistics | October 10, 2025 | ransomware_live | — |
| One law firm in Canada | October 7, 2025 | ransomware_live | — |
| DRL Group | October 1, 2025 | ransomware_live | — |
| Storage King | September 30, 2025 | ransomware_live | — |
| Alan Shintani, Inc | September 19, 2025 | ransomware_live | — |
| GCC of America, inc. | September 2, 2025 | ransomware_live | — |
| TRAF Industrial Products Inc | August 28, 2025 | ransomware_live | — |
| Grand Rapids Controls | August 15, 2025 | ransomware_live | — |
| Advanced HPC | August 13, 2025 | ransomware_live | — |
| Disneyland Paris | June 20, 2025 | ransomware_live | — |
| Parkway Construction LLC | June 10, 2025 | ransomware_live | — |
Page 1 of 2Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).