Scalian listed on Anubis ransomware leak site

• Ransomware group: Anubis
• Country: France
• Sector: Technology
• Announcement date: March 27, 2026

Anubis claims data breach against Scalian

The Anubis ransomware group has published a listing on its dedicated leak site, claiming to have compromised data belonging to the French technology company Scalian. The announcement, which was posted on March 27, 2026, serves as a public claim by the threat actors regarding their activities against the organization. This type of public listing is a common tactic used by ransomware groups to exert pressure on their targets through the threat of data exposure.

According to the claims made by the Anubis group, the breach involves the theft of confidential internal documents. The threat actors allege that these documents were obtained during an attack that occurred on the same day the announcement was made. While the group has taken responsibility for the listing, the specific details regarding the volume of data or the exact nature of the intrusion remain unconfirmed by the organization.

Details of the alleged data exposure

The information provided by the threat actors includes visual evidence in the form of screenshots. These screenshots purportedly show various sensitive corporate documents that were taken during the incident. The content displayed in these images suggests that the breach has touched upon several core areas of the company's internal operations and administrative structure.

The specific types of data identified in the screenshots include:

• Financial documents
• Corporate contracts
• Meeting minutes
• Organizational charts

The exposure of such documents, which include meeting minutes and organizational charts, indicates that the leaked material contains details regarding the company's internal processes and strategic frameworks. Such information is highly sensitive as it provides a roadmap of how a company operates on a day-to-day basis.

About Scalian

Scalian is a technology company based in France. The organization specializes in several critical areas of digital and industrial infrastructure, including digital transformation, systems engineering, and operational performance. Due to the nature of its technical expertise, Scalian provides services primarily to high-stakes sectors, including the aerospace, defense, energy, and transport industries. These sectors are often considered critical infrastructure, making the security of their service providers a significant concern for global supply chain integrity.

Impact assessment and industry implications

The alleged breach of Scalian could lead to the exposure of sensitive corporate data, which may result in negative impacts on the company's commercial reputation. Because the leaked documents appear to contain details regarding strategic plans and operational processes, there is a potential risk that this information could be utilized by malicious actors for secondary attacks or targeted phishing attempts against the company or its clients.

Furthermore, as Scalian is a French-based entity, this incident may trigger legal sanctions and compliance processes under the European Union's General Data Protection Regulation (GDPR). Organizations operating within the European Union must adhere to strict protocols regarding data protection and incident reporting to mitigate legal and financial liabilities.

In the broader context of cyber threats, the Anubis group is assessed to be an actor that utilizes data leaking as a method to exert extortion pressure. This is a hallmark of double extortion tactics, where attackers not only encrypt data to disrupt operations but also steal it to threaten its public release. To defend against such threats, organizations in the technology and critical infrastructure sectors often implement multi-layered security strategies. These include robust access controls, continuous monitoring of network traffic, and comprehensive employee training to recognize social engineering and phishing attempts. Maintaining rigorous compliance with regional data protection laws is also a vital component of a modern cybersecurity posture.