Advanced HPC targeted by Anubis ransomware group

• Ransomware group: Anubis
• Country: United States
• Sector: Technology
• Announcement date: August 13, 2025

Anubis ransomware group claims data breach at Advanced HPC

The Anubis ransomware group has announced the leak of internal documents that allegedly belong to Advanced HPC. According to the group's announcement on their leak site, the organization has been compromised, resulting in the exposure of a significant volume of sensitive information.

Details of the alleged attack

On August 13, 2025, the Anubis group claimed that they had successfully compromised data belonging to Advanced HPC. The threat actors allege that approximately 1 TB of data was exfiltrated from the company's systems. The group has attributed this successful exfiltration to the company's weak security measures. To support their claims, the group has released samples of documents that appear to contain commercial correspondence between Advanced HPC and various government agencies, as well as entities within the defense industry.

Alleged data types and contents

The information that has allegedly been leaked is extensive and covers various aspects of the company's business operations and financial transactions. The group claims that the stolen data includes a wide range of sensitive documents that could be used for various malicious purposes. The specific types of data mentioned in the leak include:

• Purchase orders
• Invoices
• Credit card information
• Balance sheets
• Customer contact information

About Advanced HPC

Advanced HPC is a technology company that designs and integrates high-performance computing (HPC) systems, servers, and storage solutions. Their work serves critical sectors, including scientific research, defense, and various enterprise applications. The company is known for providing custom hardware configurations and technical support services to meet the specific needs of its diverse client base.

Security implications and risks

This alleged leak may pose a significant risk to supply chain security, given the strategic nature of Advanced HPC's partnerships in the defense and scientific research sectors. Because the leaked documents contain sensitive information related to government agencies, the breach could potentially facilitate secondary attacks and targeted phishing campaigns against the company or its partners.

As a United States-based entity, the company may face data breach notification obligations under relevant state laws and federal regulations. While public information regarding the Anubis group remains limited, the potential misuse of this leaked data presents various risks to the company's clients and business partners, including the possibility of identity theft or corporate espionage.

In the broader context of cyber threats, ransomware groups often employ a strategy known as double extortion. In these scenarios, attackers do not just encrypt a victim's data to demand a ransom for decryption; they also steal sensitive information to threaten the public release of that data if the ransom is not paid. This increases the pressure on organizations, as the threat of reputational damage and regulatory fines becomes a significant motivator for payment. Organizations in high-stakes sectors like defense and scientific research often implement rigorous defensive measures, such as multi-factor authentication, network segmentation, and continuous monitoring, to mitigate these types of risks. However, as seen in this claim, even specialized technology providers remain targets for sophisticated threat actors seeking to exploit vulnerabilities in the supply chain.