Skip to content
Leak site of anubis, captured by ThreatCluster

anubis

Active

25 tracked victims · First seen Feb 25, 2025 · Last seen Oct 20, 2026

About

Written by ThreatCluster from 11 stories

Anubis ransomware group operates as a ransomware-as-a-service (RaaS) actor and has claimed data theft from victims as part of its extortion pattern. The group has claimed more than 100 victims across Healthcare, Manufacturing, Business Services, Technology, and Construction, with the United States, Australia, the United Kingdom, France, and Canada most affected. Recent reporting shows a pattern of disruptive attacks on municipal and critical-infrastructure targets, illustrated by the August 5, 2026 attack on the City of Coweta that disrupted city operations.

Sectors: Healthcare, Law Firm, Manufacturing · Countries: US, GB, AU

Recent victims

View all →
VictimSectorCountryDataPostedStatus
Fisher59Not Found—Oct 20, 2026
MyndReal EstateUnited States112 GBOct 9, 2026listed
Leadec
www.leadec-services.com
ManufacturingDE2.1 TBOct 7, 2026listed
Gaedke & Partner Steuerberatung
gaedke.co.at
AccountingDE82 GBSep 22, 2026listed
Summa Gold
www.summagold.com
Mining544 GBSep 21, 2026listed
Quest GroupHuman capitalUS239 GBSep 18, 2026published
Better Accounting Solutions
betteraccountingsolutions.com
Finance159 GBSep 14, 2026listed
Gellibrand Support Services
om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion
Healthcare85 GBSep 9, 2026listed
Marlborough Partners
marlboroughpartners.com
FinancialGB892 GBSep 2, 2026listed
Caduceus Medical Group
www.caduceusmedicalgroup.com
Healthcare105 GBAug 28, 2026listed
Interim HealthCare [Head office]
www.interimhealthcare.com
Hospice servicesUS530 GBAug 21, 2026listed
Scholle IPN / SIG
www.scholleipn.com
ManufacturingDE146 GBAug 18, 2026listed
Interim HealthCareHealthcareUS146 GBAug 15, 2026published
Cleaver-Brooks
cleaverbrooks.com
Industrial MachineryUnited States737 GBAug 10, 2026listed
BLACKBURN'S
blackburnsmed.com
HealthcareUS519 GBAug 3, 2026listed
Cameron Regional Medical Center
www.cameronregional.org
HealthcareUnited States3,4 TBAug 3, 2026listed
Winn-Dixie
www.winndixie.com
Grocery RetailUS315 GBAug 3, 2026listed
Prelys Courtage
anubisyfkh5rixydjpoo3jqucauajz2juybrbtuglcppjj2y3eg3y6ad.onion
FinanceFrance29 GBJul 28, 2026listed
Coca-Cola / FairlifeFoodUnited States671 GBJul 27, 2026listed
Eagle Crest Communities
www.eaglecrestlife.org
Care providerUS273 GBJul 26, 2026listed
Bath Fitter
anubisyfkh5rixydjpoo3jqucauajz2juybrbtuglcppjj2y3eg3y6ad.onion
ManufacturingUS275 GBJul 20, 2026listed
Fairlife / Coca-ColaAgriculture and Food ProductionUS—Jul 20, 2026
Casper Orthopedics
www.wyoortho.com
Physician ClinicUS117 GBJul 12, 2026listed
Surtifamiliar
surtifamiliar.com
Grocery RetailCO102 GBJul 12, 2026listed
Community Advocates
communityadvocates.net
Law Firm263 GBJul 12, 2026listed

Found by ThreatCluster

97 total from our crawl

Listed on this group's leak site and not present in the aggregated feeds.

BLACKBURN’S
· 315 GB
Oct 9, 2026
Law Firm / Community Advocates
communityadvocates.net · Grocery Retail · 102 GB
Oct 7, 2026
About Women Ob-Gyn
Gynecology Clinic
Sep 22, 2026
Tractial
Digital payment services and card-accounts · 20 GB
Sep 21, 2026
Colorado Dental Wellness Center
Dental Clinic · 86 GB
Sep 21, 2026
Marnell Financial Services
Finance · 185 GB
Sep 21, 2026
Bober Kurwa
Polish Transport & Logistics
Sep 20, 2026
Copec S.A.
Top Secret · 6 TB full data
Sep 20, 2026
Adriatic Port Authority
porto.ancona.it · Italy
Sep 20, 2026
Gynecology Clinic
Gynecology Clinic
Sep 20, 2026
MAYCO
Automotive / Technology
Sep 20, 2026
Physician Clinic
· 117 GB
Sep 14, 2026
BLACKBURN'S
www.blackburnsmed.com · Healthcare · 315 GB
Sep 11, 2026
Boston Orthotics, Inc.
Healthcare · 125 GB
Sep 5, 2026

All ransomware groups · Dark web intelligence