TRAF Industrial Products Inc listed on Anubis ransomware leak site

• Ransomware group: Anubis
• Country: Canada
• Sector: Manufacturing
• Announcement date: August 28, 2025

The Anubis ransomware group has claimed responsibility for a data breach involving TRAF Industrial Products Inc, a Canadian manufacturing firm. On August 28, 2025, the threat actor group listed the organization on its dedicated leak site, alleging that they have successfully compromised the company's network and obtained sensitive information.

Details of the alleged attack

According to the announcement made by the Anubis group on August 28, 2025, the attackers claim to have gained unauthorized access to the internal network of TRAF Industrial Products Inc. The group has stated their intention to publish the stolen information, which reportedly includes a variety of sensitive corporate and personal files. This type of activity is characteristic of double extortion ransomware attacks, where threat actors not only encrypt a victim's systems to disrupt operations but also steal sensitive data to use as leverage for ransom demands.

The group's listing suggests that the breach involves a wide range of documentation. While the specific volume of data and the exact ransom demand have not been disclosed by the group, the announcement indicates that the stolen files contain critical business and personal information. The threat actors claim that the compromised data includes technical documentation and engineering drawings, which are vital to the company's operations. Furthermore, the group alleges that they have obtained financial records and corporate correspondence.

Compromised data types

The information allegedly stolen by the Anubis group encompasses several categories of sensitive data. Based on the claims made on the leak site, the following types of information are reportedly involved:

• Employee personal data
• Financial records
• Technical documents
• Non-disclosure agreements

The inclusion of non-disclosure agreements (NDAs) is particularly significant, as these documents often contain confidential terms regarding partnerships and business operations. The presence of employee personal data also introduces significant privacy concerns for the individuals associated with the company.

Organization profile

TRAF Industrial Products Inc is a Canadian manufacturing company that produces precision-machined parts and components for the aerospace and defense industries. The company specializes in high-tolerance metal machining and engineering solutions.

Risk assessment and industry implications

This incident may pose a significant risk due to the company's role in the aerospace and defense supply chain. The exposure of personal identifiers, such as passport details and social insurance numbers, could lead to identity theft risks for the affected employees. Given the company's location in Canada, the incident may trigger regulatory scrutiny under the Personal Information Protection and Electronic Documents Act (PIPEDA) and mandatory breach notification requirements.

Furthermore, the disclosure of technical data related to defense projects could negatively impact the company's commercial reputation and international partnerships. For organizations operating within critical supply chains like aerospace and defense, such breaches can have cascading effects on security and trust across the entire network of partners.

In general, organizations facing such threats often implement defensive measures such as multi-factor authentication, network segmentation, and regular security awareness training to mitigate the risk of unauthorized access. While information regarding the Anubis group remains limited, this incident highlights the ongoing risks faced by specialized manufacturing entities in high-stakes industrial sectors.