Ferrum AG Listed by anubis Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
Ferrum AG was listed by the Anubis ransomware group on July 03, 2026, after internal files were exfiltrated in a ransomware attack; the number of people affected remains unknown. Check whether any of your data was involved and change passwords or enable additional security steps if needed.
What happened
Ferrum AG, identified as one of the largest family-owned manufacturing businesses in Switzerland, was listed by the anubis ransomware group on July 3, 2026. The group claims to have exfiltrated internal files in a ransomware attack. No information has been released on the date of the intrusion, the volume of data taken, or the method used to gain access.
Who is anubis?
Anubis operates as a ransomware group that targets organizations and posts victim names on a leak site when it asserts that data has been removed. Groups of this type commonly encrypt systems and threaten public release of stolen material. The listing of Ferrum AG constitutes the group’s claim; no independent confirmation of the incident details has been reported.
About Ferrum AG
Ferrum AG conducts manufacturing operations in Switzerland. Companies in this sector maintain records on employees, suppliers, production schedules, and commercial relationships. An incident at such a firm can affect both the privacy of individuals whose details appear in those records and the continuity of business processes that rely on them.
What was likely exposed
The reported information states only that internal files were exfiltrated. The exact categories of data contained in those files have not been disclosed. Manufacturing organizations typically store personnel files, supplier contracts, and operational documents, yet it is unconfirmed whether any of these types were present in the material taken.
What's at stake
Individuals whose details appear in the exfiltrated files may encounter attempts to misuse that information for fraud or targeted contact. The organization may experience interruptions to production planning and reduced confidence from partners who rely on the confidentiality of shared records.
If your data was in this claimed breach
Anyone who suspects their information may have been involved should review account activity and update passwords on systems linked to Ferrum AG. A free exposure scan of an email address can indicate whether the address has appeared in previously published breach data.
- Enable multi-factor authentication on all accounts that accept it.
- Monitor bank and credit statements for unauthorized transactions.
- Request a copy of any personal data held by the company under applicable privacy regulations.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
Tractial Listed by anubis Ransomware GroupAkzoNobel Listed by anubis Ransomware GroupEnvirogen Technologies Listed by anubis Ransomware GroupSamkwang Listed by anubis Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the Ferrum AG Listed by anubis Ransomware Group →
Publicly posted by anubis — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.