Nachlass Nord listed on Anubis ransomware leak site

• Ransomware group: Anubis
• Country: Germany
• Sector: Professional Services
• Announcement date: June 25, 2026

Anubis claims compromise of Nachlass Nord

The threat actor known as Anubis has claimed responsibility for a cyberattack against Nachlass Nord. In a recent announcement on its dedicated leak site, the group listed the German organization, alleging that they have successfully gained unauthorized access to the firm's corporate network. This announcement, posted on June 25, 2026, marks a targeted strike against the professional services firm.

The Anubis group has demanded that the management of Nachlass Nord contact them directly to resolve the situation. The threat actor has employed a double extortion tactic, a common method used by modern ransomware groups where the attackers not only encrypt systems but also threaten to publish sensitive information on public leak sites to exert maximum pressure on the victim. In this instance, the group has stated that a failure to comply with their demands may result in the public release of the stolen data. While the group's activities have been noted, public information regarding the specific technical capabilities and background of this group remains limited.

Alleged data types involved in the breach

According to the claims made by the Anubis group, the breach has resulted in the compromise of various sensitive files. The threat actor alleges that the following categories of information have been accessed:

• Identification documents
• Estate records
• Client data

The specific volume of the stolen data and the total number of files involved have not been disclosed by the attackers. Furthermore, the group has not specified a ransom demand in their public announcement.

About Nachlass Nord

Nachlass Nord is a law firm based in Hamburg, Germany. The organization specializes in inheritance law and estate administration, providing essential legal services related to inheritance processes, the management of wills, and various forms of legal consulting. Given their role in handling sensitive legal matters, the firm operates within the professional services sector, where client confidentiality is a primary concern.

Risks and implications of the alleged attack

The nature of the data allegedly stolen—including identification documents and estate records—presents significant risks to the organization's clients. The compromise of such information can lead to severe consequences for individuals, including the potential for identity theft and various forms of financial fraud. For the organization, the breach carries substantial implications across several domains.

Because Nachlass Nord is based in Germany, any confirmed data breach involving personal information could lead to significant legal consequences under the European Union's General Data Protection Regulation (GDPR). The regulatory framework imposes strict requirements on how organizations handle and protect personal data, and failures in these protections can result in heavy penalties. Additionally, as a firm operating in the professional services sector, the organization faces potential for significant reputational damage. The loss of client confidentiality is particularly damaging to law firms, where trust is the foundation of the professional relationship.

In response to such threats, organizations in the professional services sector typically focus on strengthening their defensive postures. This often involves implementing robust multi-factor authentication, conducting regular security awareness training for employees, and maintaining rigorous backup protocols. Furthermore, maintaining a comprehensive incident response plan is a critical step for organizations to mitigate the impact of potential data leaks and extortion attempts.