Duhabex listed on anubis ransomware leak site

• Ransomware group: anubis
• Country: Poland
• Sector: Transportation
• Announcement date: December 5, 2025

Anubis ransomware group claims Duhabex data compromise

The Polish logistics company Duhabex has been listed on the leak site of the anubis ransomware group. On December 5, 2025, the group published an announcement claiming that data belonging to Duhabex has been compromised. This claim suggests that a security breach has occurred regarding the company's international transport and logistics operations. By listing the entity on their leak site, the group indicates that it is continuing its ransomware activities.

Ransomware groups often utilize leak sites to exert pressure on their victims. These platforms serve as a public stage where threat actors post information about compromised organizations to shame them into paying ransoms. This tactic is a central component of double extortion strategies, where attackers not only encrypt a victim's systems but also threaten to release sensitive information to the public or specific stakeholders to maximize leverage.

Details regarding the claimed data breach

While the anubis group has made a public claim regarding the breach, specific details regarding the stolen information remain unavailable. The group has not provided any screenshots or detailed lists regarding the content of the leaked data. Furthermore, there is no information available regarding the total size of the data, the specific file count, or the amount of ransom demanded by the attackers.

• No specific data types were named in the listing.

In many ransomware incidents, the lack of immediate detail from the threat actor is common during the early stages of a leak. Attackers may wait to see if a victim responds before releasing more granular information to increase the pressure. For organizations, the absence of immediate data details does not necessarily mean the breach is limited in scope, but rather that the attackers have not yet chosen to disclose the specifics of their haul.

About Duhabex

Duhabex is a Poland-based company providing international transportation and logistics services. The organization operates in the field of road transport and freight solutions, managing complex supply chain requirements for its clients through its various logistics operations.

Potential implications and industry risks

This incident suggests that corporate and operational data within Duhabex may be at risk of exposure. Should the breach be confirmed, it could lead to disruptions in logistics operations and the potential exposure of trade secrets to third parties. Because the company operates in Poland, it is likely that legal processes regarding data protection under the GDPR could be triggered. Furthermore, if the leaked data includes employee or customer information, secondary risks such as identity theft or targeted phishing attacks may arise.

In the transportation and logistics sector, the impact of such breaches can be significant due to the interconnected nature of global supply chains. A disruption in one node of the chain can have cascading effects on various partners and clients. Organizations in this sector typically focus on robust defensive measures to mitigate these risks, such as implementing strict access controls, maintaining offline backups, and conducting regular security audits to protect operational integrity.

Publicly available information regarding the anubis group remains limited. As with many specialized ransomware operations, their specific methodologies and long-term objectives are not fully documented in the public domain. For organizations facing similar threats, maintaining a proactive security posture and a well-rehearsed incident response plan are critical steps in minimizing the impact of potential data exposure or operational downtime.