Copec S.A. targeted by Anubis ransomware group

• Ransomware group: Anubis
• Country: Chile
• Sector: Energy & Utilities
• Announcement date: January 14, 2026

The Anubis ransomware group has claimed a data breach involving Copec S.A., a major energy provider based in Chile. According to an announcement made on the group's leak site, the threat actor claims to have successfully gained access to the organization's data.

The alleged attack event

The Anubis group listed Copec S.A. on their dedicated leak site on January 14, 2026. In the announcement, the group claims to have obtained access to the organization's internal data. While the claim has been made publicly on a ransomware leak site, information regarding the specific capabilities and background of the Anubis group remains limited.

Ransomware leak sites are platforms used by cybercriminal groups to pressure victims into paying ransoms. These groups often employ a tactic known as double extortion, where they not only encrypt an organization's systems to disrupt operations but also steal sensitive information. The threat of leaking this stolen data on a public website serves as additional leverage to coerce the victim into meeting ransom demands.

Details of the claimed data breach

Despite the claim of a successful breach, the group has not provided specific details regarding the nature or the content of the allegedly leaked data. At this time, no screenshots or detailed information have been provided to substantiate the claims or to show the specific files that may have been compromised.

The listing names no specific data types or affected categories within the announcement.

Organizational profile

Copec S.A. is a leading energy company based in Chile. The organization operates extensively in fuel distribution, energy solutions, and retail services. It maintains an extensive network of service stations across the country and plays a critical role in the energy sector.

Potential implications and risks

The alleged breach may pose significant risks to the organization's operational continuity and the confidentiality of customer data. If the data is indeed exposed, the organization may face various legal and regulatory obligations under Chilean data protection regulations. The severity of the incident's impact may vary depending on the actual scope of the leaked data.

Beyond the immediate impact on the company, secondary risks must be considered. These include the potential for the leaked data to be used in identity theft or targeted phishing campaigns against the organization or its clients. Furthermore, the organization's supply chain partners could also be indirectly affected by such a breach.

In the energy and utilities sector, maintaining robust cybersecurity defenses is essential for protecting critical infrastructure. Organizations in this sector often focus on several defensive steps to mitigate such risks, including:

• Implementing strict access controls and multi-factor authentication to prevent unauthorized access.
• Maintaining regular, offline backups to ensure operational continuity in the event of encryption.
• Continuous monitoring of network traffic to detect anomalous behavior early.
• Regularly patching vulnerabilities in both IT and operational technology systems.
• Conducting comprehensive employee training to recognize phishing attempts and social engineering.