Ransomware group
Anubis ransomware: victims and leak site activity
The Anubis ransomware group has listed 116 victims on its leak site since February 2025; its latest post is from 25 October 2026. Most affected countries: United States, United Kingdom and Australia. Most targeted sector: Healthcare.
Total posts
116
First seen
2025-02-25
Latest post
2026-10-25
Countries hit
19
About Anubis
Anubis is a ransomware-as-a-service group active since December 2024 that targets healthcare, engineering, construction, and professional services sectors, offering affiliates a flexible revenue split model and an optional destructive "wipe mode" alongside standard encryption.
- Leak site (Tor)
- http://6g3aoky5hft4mvzcqt2bugo4r465woaorjhd7em2k2v24sr2exaro5id.onion
- Profile
- ransomware.live
Most targeted countries
- United States 61
- United Kingdom 8
- Australia 6
- Germany 5
- France 5
- Canada 4
- Netherlands 2
- New Zealand 2
- Bulgaria 1
- Switzerland 1
Most targeted sectors
- Healthcare 30
- Manufacturing 22
- Professional Services 21
- Financial Services 9
- Technology 9
- Transportation 6
- Hospitality 5
- Retail & E-Commerce 5
- Energy & Utilities 4
- Agriculture and Food Production 1