Ferrum AG targeted by Anubis ransomware group

• Ransomware group: Anubis
• Country: Switzerland
• Sector: Manufacturing
• Announcement date: July 3, 2026

Anubis ransomware group claims data breach at Ferrum AG

The Anubis ransomware group has published a notice on its leak site, claiming to have targeted the Swiss-based manufacturing company Ferrum AG. The announcement, which appeared on the group's platform on July 3, 2026, asserts that the attackers have successfully exfiltrated data belonging to the organization. While the group has made these claims, information regarding the specific capabilities and history of the Anubis group remains limited in the public domain.

Ransomware attacks often involve a tactic known as double extortion, where threat actors not only encrypt an organization's systems to disrupt operations but also steal sensitive information. By threatening to leak this data on a public platform, the attackers aim to increase pressure on the victim to meet ransom demands. In such scenarios, the exposure of internal documents can lead to significant reputational and operational consequences for the affected entity.

Details of the alleged data leak

According to the announcement made by the Anubis group, the leaked information consists of various documents that are stated to belong to the internal operations of Ferrum AG. The group has shared screenshots intended to demonstrate the scope of the breach. The content of these screenshots reportedly includes several types of sensitive corporate information, such as:

• Financial records
• Contracts
• Internal correspondence
• Supplier information

The specific volume of the stolen data, the total number of files involved, and the specific ransom demand made by the attackers have not been disclosed in the public announcement. The exact date the initial intrusion occurred is claimed by the group to be July 3, 2026.

About Ferrum AG

Ferrum AG is a manufacturing company based in Switzerland. The organization specializes in the production of can seaming machines and various metal forming solutions. Operating as a family-owned business, the company provides essential industrial equipment specifically designed for the food and beverage industry.

Potential impact and strategic risks

The disclosure of the allegedly leaked data could have significant implications for the commercial operations and business partnerships of Ferrum AG. Because the company operates within Switzerland, it may be subject to specific legal obligations under the Federal Act on Data Protection (FADP) regarding the handling and protection of data.

The sensitivity of the documents shared by the Anubis group could create security vulnerabilities in the company's relationships with its third-party suppliers. Such leaks often lead to secondary extortion attempts, where attackers target the company's partners using the stolen information. Furthermore, the exposure of corporate data poses a strategic risk by providing competitors with access to internal details. There is also an increased likelihood that employees and business partners could be exposed to risks such as identity theft due to the nature of the leaked documentation.

For organizations operating in the manufacturing sector, maintaining robust cybersecurity postures is essential to protect intellectual property and supply chain integrity. Common defensive strategies include implementing strict access controls, maintaining regular offline backups, and conducting comprehensive employee training to recognize phishing attempts. Protecting the confidentiality of supplier agreements and financial records is critical to maintaining trust within the industrial ecosystem and preventing the strategic advantages often sought by malicious actors during a breach.