Goodfellow & Schuettlaw targeted by Anubis ransomware group

• Ransomware group: Anubis
• Country: Canada
• Sector: Financial Services
• Announcement date: October 23, 2025

The Anubis ransomware group has published a listing on its leak site claiming that the Canadian law firm Goodfellow & Schuettlaw has been targeted in a data breach. According to the announcement made on October 23, 2025, the threat actors allege they have successfully compromised the organization's systems and have access to sensitive information.

Details of the claimed attack

The Anubis group listed Goodfellow & Schuettlaw on its leak site on October 23, 2025, alleging a data breach. To support their claims, the threat actor shared various documents as evidence, which are claimed to have been obtained directly from the organization's systems. While the group has made these claims publicly, it is noted that public information regarding the specific operations and methods of this group remains limited.

Ransomware attacks of this nature often follow a pattern known as double extortion. In such scenarios, threat actors do not merely encrypt an organization's data to disrupt operations; they also exfiltrate sensitive information to use as leverage. By threatening to release stolen data on a public leak site, attackers aim to pressure the victim into paying a ransom to prevent the exposure of confidential information, which can lead to significant reputational and legal damage.

Data involved in the breach

The leak announcement claims that the stolen information includes a variety of sensitive documents. The specific types of data mentioned in the claim include:

• Personal data
• Confidential contracts
• Audit reports
• Financial statements
• Real estate documents

The nature of these documents suggests that the breach could impact a wide range of sensitive business and personal information. While the specific volume of data or the exact number of files involved has not been disclosed by the group, the categories listed indicate a high level of sensitivity regarding the organization's internal and client-facing information.

About Goodfellow & Schuettlaw

Goodfellow & Schuettlaw is a law firm based in Calgary, Canada. The firm provides a variety of legal services to its clients, specializing in areas such as family law, real estate law, and wills and estate planning.

Impact and potential consequences

This breach may increase the risk of identity theft and fraud for the organization's clients and employees. Because the organization is based in Canada, the incident may lead to legal consequences under the Personal Information Protection and Electronic Documents Act (PIPEDA). The nature of the shared documents suggests that the organization's operational confidentiality may have been compromised.

Secondary risks include the potential for the leaked data to be used in targeted phishing attacks. When sensitive documents like contracts or financial statements are leaked, attackers can use the specific details contained within them to craft highly convincing fraudulent communications, making it harder for individuals to detect a scam.

In the wake of such incidents, organizations are often required to fulfill data breach notification obligations and inform the affected parties. For organizations operating in the financial and legal sectors, maintaining robust cybersecurity postures is critical. Common defensive steps include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular employee training to recognize social engineering attempts. Given the potential for legal and regulatory scrutiny, ensuring compliance with regional data protection laws remains a vital component of incident response and recovery.