Anubis ransomware group claims data breach against Mayco International

• Ransomware group: Anubis
• Country: United States
• Sector: Manufacturing
• Announcement date: November 2, 2025

Anubis ransomware group claims data breach against Mayco International

The Anubis ransomware group has listed data allegedly belonging to Mayco International on its leak site. According to the group's announcement, which was made on November 2, 2025, the breach involves a significant volume of information, with the group claiming that over 1TB of data has been compromised.

Ransomware attacks often involve a tactic known as double extortion, where threat actors not only encrypt an organization's systems to disrupt operations but also exfiltrate sensitive data. By threatening to release this stolen information on a public leak site, attackers aim to pressure the victim into paying a ransom to prevent the exposure of proprietary or sensitive information. This method increases the leverage held by the cybercriminals, as the threat of reputational damage and legal consequences often outweighs the immediate operational impact of the encryption itself.

Details of the alleged data theft

The announcement made by the Anubis group includes various file samples that are purportedly related to the internal operations of Mayco International. The group claims that the stolen content includes highly sensitive technical and business information. Specifically, the leaked content is claimed to include technical drawings with .prt and .mfr file extensions, 3D models, manufacturing details for automotive parts, and business correspondence with partners.

The specific types of data identified in the listing include:

• Technical designs
• 3D manufacturing models
• Business correspondence
• Manufacturing process reports

While the group has provided samples to support their claims, the full extent of the breach remains subject to the group's assertions. It is important to note that no information was provided regarding a specific ransom demand or the exact number of files involved in the incident.

About Mayco International

Mayco International is a supplier that designs and manufactures interior and exterior plastic parts, modules, and systems for the automotive industry. The company specializes in injection molding and assembly processes, making it a specialized entity within the manufacturing sector.

Potential impact and industry implications

This breach may pose significant risks to Mayco International's intellectual property and trade secrets. The potential use of the shared technical data by competitors could negatively impact the company's market competitiveness. Furthermore, the exposure of correspondence with business partners may compromise supply chain security and increase third-party risks. As a US-based entity, the company may face data privacy obligations under relevant state laws and federal regulations.

For organizations operating within the manufacturing and automotive supply chain sectors, such incidents highlight the critical importance of robust cybersecurity frameworks. Protecting intellectual property, such as 3D models and technical drawings, is essential for maintaining a competitive advantage. Organizations typically focus on implementing defense-in-depth strategies, which include regular security awareness training, multi-factor authentication, and strict access controls to limit the exposure of sensitive manufacturing data. Additionally, securing communication channels with business partners is vital to mitigate the risk of supply chain compromises.

Information about the Anubis group remains limited in the public domain. As with many ransomware-as-a-service or targeted group operations, the specific methodologies used by the attackers are often not fully disclosed until after an investigation is completed by forensic experts. Organizations are encouraged to monitor for such leaks and maintain comprehensive incident response plans to address both the technical recovery and the legal and reputational challenges that follow a data exposure event.