Gellibrand Support Services listed on anubis leak site

• Ransomware group: anubis
• Country: Australia
• Sector: Professional Services
• Announcement date: September 9, 2026

The threat actor group known as anubis has listed the Australian organization Gellibrand Support Services on its leak site. The announcement, made on September 9, 2026, involves claims of a data breach targeting the organization's sensitive information.

The claimed attack and event details

According to the announcement posted by the anubis group, the threat actors claim to have successfully accessed and obtained data from Gellibrand Support Services. The group alleges that they were able to infiltrate the organization's systems and gain access to both patient records and employee information through the various services provided by the company. This claim was made on the same day the listing appeared on the leak site.

The announcement provided by the group includes specific allegations regarding the organization's data security practices. This type of public naming on a leak site is a common component of modern ransomware operations. In these scenarios, threat actors often use the threat of releasing stolen information to pressure an organization into meeting their demands, a tactic frequently referred to as double extortion. While the group has made these claims, the specific details regarding the breach remain part of the group's allegations.

Data allegedly involved in the breach

The information allegedly stolen by the anubis group is described as containing highly sensitive and personal documentation. The threat actor claims that the stolen data includes medical records and financial details that could impact both the clients served by the organization and the staff members employed there. Specifically, the leak allegedly contains:

• Patient medical records
• Personal data
• Employee financial data

The exposure of such diverse data types—ranging from healthcare information to financial records—represents a significant privacy concern for the individuals involved. The presence of medical and personal data in a leak often leads to long-term privacy risks for the affected individuals, as such information is difficult to change or retract once it has been made public.

About Gellibrand Support Services

Gellibrand Support Services is an organization based in Victoria, Australia. It operates as a non-profit organization dedicated to providing essential services to individuals with disabilities. The organization's mission involves providing accommodation, support, and care services to its clients. To enhance the quality of life for these individuals, Gellibrand Support Services operates various personalized support programs designed to meet the specific needs of those they serve.

Potential impact and industry implications

This alleged breach may pose significant risks of identity theft and fraud for the patients, due to the exposure of sensitive medical information. Because the organization serves as an NDIS provider, the breach could lead to regulatory scrutiny and potential administrative penalties regarding established data protection standards. The use of double extortion tactics is a notable aspect of this incident, as it is used to exert pressure on the organization through the threat of data disclosure.

For organizations operating within the professional services and care sectors, such incidents highlight the critical importance of robust cybersecurity frameworks. Protecting sensitive health and personal data is a primary concern for service providers. To mitigate such risks, organizations often implement defensive strategies such as multi-factor authentication, regular security audits, and comprehensive employee training programs. Furthermore, maintaining strict adherence to regulatory compliance standards is essential for managing the legal and administrative risks associated with data protection. While public information regarding the anubis group remains limited, the potential for long-term privacy risks for individuals remains a significant concern following the publication of health-related data.