anubis
First seen February 25, 2025Active115 claimed victims
The claims below are reproduced as posted by anubis on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Anubis is a ransomware-as-a-service group active since December 2024 that targets healthcare, engineering, construction, and professional services sectors, offering affiliates a flexible revenue split model and an optional destructive "wipe mode" alongside standard encryption.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Storage King | September 30, 2025 | ransomware_live | — |
| Alan Shintani, Inc | September 19, 2025 | ransomware_live | — |
| GCC of America, inc. | September 2, 2025 | ransomware_live | — |
| TRAF Industrial Products Inc | August 28, 2025 | ransomware_live | — |
| Grand Rapids Controls | August 15, 2025 | ransomware_live | — |
| Advanced HPC | August 13, 2025 | ransomware_live | — |
| Disneyland Paris | June 20, 2025 | ransomware_live | — |
| Parkway Construction LLC | June 10, 2025 | ransomware_live | — |
| Two Kings Casino Resort | April 23, 2025 | ransomware_live | — |
| DG2 Design | April 1, 2025 | ransomware_live | — |
| Ambleside | March 23, 2025 | ransomware_live | — |
| First Defense Fire Protection | February 25, 2025 | ransomware_live | — |
| Comercializadora S&E Perú | February 25, 2025 | ransomware_live | — |
| Summit Home Health, INC. | February 25, 2025 | ransomware_live | — |
| Pound Road Medical Centre | February 25, 2025 | ransomware_live | — |
← NewerPage 2 of 2
Claim data from ransomware.live and RansomLook (CC BY 4.0).