Carbis Loadtec targeted by Anubis ransomware group

• Ransomware group: Anubis
• Country: United Kingdom
• Sector: Manufacturing
• Announcement date: December 23, 2025

The Anubis ransomware group has announced on its leak site that it has compromised data belonging to Carbis Loadtec. According to the claims made by the threat actors, the breach involves a significant volume of sensitive information, which the group asserts has been leaked following an attack on the organization.

The claimed attack and data breach

The Anubis group claims to have successfully compromised data belonging to Carbis Loadtec, totaling 300 GB. The threat actor alleges that the leaked files include a variety of sensitive corporate and personal information. According to the group's announcement, the breach is not limited to a single type of file but encompasses a broad spectrum of organizational data.

The group asserts that the leaked data includes critical business documentation and technical assets. Furthermore, the threat actors claim that a database containing over 7,000 personal contact records has been exposed as part of this incident. This type of claim is common in double extortion ransomware attacks, where threat actors not only encrypt an organization's systems but also steal sensitive data to pressure the victim into paying a ransom by threatening to publish the information online.

The data allegedly involved in the leak

The information claimed to be part of the leak includes various types of proprietary and personal data. Based on the group's announcement, the following items are allegedly included in the breach:

• Contracts
• Technical drawings
• Client contact information
• Inspection reports
• Site photos
• Manuals
• A customer database containing over 7,000 contact records

The inclusion of technical drawings and inspection reports suggests that the breach may impact the core operational and engineering assets of the company. The presence of a large database of contact records indicates that personal identifiable information (PII) is a primary component of the stolen data set.

About Carbis Loadtec

Carbis Loadtec is an engineering company that designs and manufactures loading arms, access platforms, and bulk liquid transfer equipment for industrial facilities. They specialize in providing solutions for the safe transfer of hazardous liquids.

Potential impact and security implications

This breach may lead to the exposure of Carbis Loadtec's trade secrets and intellectual property. The publication of client data could result in regulatory penalties under the UK GDPR. Affected individuals may face an increased risk of identity theft or targeted phishing attacks. Additionally, the leaked technical drawings and contracts could pose secondary security risks for the company's supply chain partners. Public information regarding this group is limited.

In general, when organizations in the manufacturing and engineering sectors face such breaches, the risks extend beyond immediate data loss. The exposure of technical blueprints and specialized manuals can compromise the competitive advantage of the firm. Furthermore, when supply chain partners are involved, the breach can create a ripple effect, where the security of the entire production network is called into question. Defensive measures for organizations typically include robust access controls, encryption of sensitive technical files, and continuous monitoring of network traffic to detect unauthorized data exfiltration.