ViaQuest data breach claimed by Anubis ransomware group

• Ransomware group: Anubis
• Country: United States
• Sector: Transportation
• Announcement date: April 21, 2026

Anubis claims data breach at ViaQuest

The threat actor group known as Anubis has published an announcement on a leak site, claiming to have leaked data belonging to ViaQuest. According to the announcement, the group has conducted a data breach involving the organization and has shared samples of the data they claim to have obtained.

The threat actor stated that the organization provides care services and suggested that the leak includes various documents related to the organization's operational processes and its employees. This type of announcement is a common tactic used by ransomware groups, often employing a double extortion strategy. In such scenarios, attackers not only encrypt an organization's systems but also steal sensitive information to pressure the victim into paying a ransom by threatening to release the data publicly.

Details of the claimed data leak

The samples provided by the group in their announcement appear to contain a wide variety of sensitive information. The leaked data is said to include documents related to both the organization's internal operations and the personal information of individuals associated with the company.

The specific types of data mentioned in the leak include:

• Patient medical records
• Laboratory results
• Identification documents
• Employee HR data
• Payroll records
• Internal correspondence

The presence of such diverse data types suggests a significant compromise of information that could impact multiple stakeholders within the organization and its service recipients.

About ViaQuest

ViaQuest is a healthcare organization based in Ohio, United States. The company provides home health, hospice, and support services for individuals with serious illnesses. Through its clinical and social support programs, the organization aims to improve the quality of life for its patients.

Potential risks and industry implications

This incident may pose significant risks to patient privacy due to the exposure of sensitive data from a care provider. Because the organization is based in the United States, compliance reviews under HIPAA regulations may be required to address the exposure of protected health information.

The presence of identification cards and payroll data in the leaked samples could increase the potential for identity theft or targeted phishing attacks against the affected individuals. When personal identifiers and financial documents are leaked, individuals often face an increased risk of fraudulent activities designed to exploit their sensitive information.

Information regarding the Anubis group remains limited. In the wake of such incidents, organizations are typically expected to fulfill data breach notification obligations and inform the affected parties regarding the scope of the compromise. For organizations operating within the healthcare sector, maintaining robust defensive measures is critical. Common defensive steps include implementing strict access controls, conducting regular security audits, and ensuring comprehensive encryption for both data at rest and data in transit to mitigate the impact of potential breaches.