LiveBreach Intelligence: data breaches, leaks & ransomware, tracked as they surfaceOngoing protection: GalaxyWarden →
Recent BreachesData breach tracker

Recent Breaches › Trumbull County Listed by anubis Ransomware Group

HIGH severityUnverified claimHow we verify

Trumbull County Listed by anubis Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

RBRecent Breaches Breach Intelligence·December 6, 2025
Trumbull County Listed by anubis Ransomware Group

Reported December 6, 2025.

HIGH
Severity
December 6, 2025
Disclosed
ShareXLinkedInFacebookRedditWhatsAppTelegram

Trumbull County was listed by the anubis ransomware group on December 6, 2025, after internal files were exfiltrated in a ransomware attack. Individuals concerned about possible exposure should review any notifications from the county and follow official guidance on protective steps.

Severity & verification
HIGH severityUnverified claim
Data types not itemised.
Published on a ransomware group’s leak site — an unverified extortion claim until the named organization or credible reporting corroborates it.
Check your exposure
See every leak and listing tied to your email. We can’t confirm any single incident against the sources we search, so we won’t pretend to. 15-second check, no card, no account. Details go to your inbox.

By running your scan you agree to the Terms and Conditions and the Privacy Policy, and to GalaxyWarden emailing you the results of this scan.

Trumbull County, Ohio, was listed on a leak site associated with the anubis ransomware group on December 6, 2025. The listing states that internal files were exfiltrated during a ransomware attack. No confirmed count of affected individuals has been released, and the precise scope of the incident remains undisclosed.

What happened

The incident came to public attention when the organization appeared on the group’s leak site. The entry describes the exfiltration of internal files in a ransomware operation. No additional details on the date of the intrusion, the volume of data taken, or the method of initial access have been made public. The number of people whose information may be involved is listed as unknown.

The group behind it: anubis

Anubis is a ransomware operation that has been publicly documented targeting government and private-sector entities. These groups commonly employ double-extortion tactics, encrypting systems and threatening to publish stolen data if a ransom is not paid. The listing of Trumbull County constitutes a claim by the group; independent confirmation of the data’s authenticity or the circumstances of its acquisition has not been provided in available reporting.

Who is Trumbull County?

Trumbull County is a local government entity in northeastern Ohio responsible for delivering public services such as courts, public safety, health programs, and property records. County governments routinely maintain databases containing resident information, employee records, and operational documents required to administer these functions. A disruption or exposure at this level can affect both day-to-day county operations and the privacy of individuals who interact with county services.

What was likely exposed

The only data category named in the listing is “internal files exfiltrated in ransomware attack.” No inventory of specific file types, record categories, or number of records has been released. Organizations of this type commonly hold personal identifiers, financial or benefits information, and internal correspondence, but the exact contents of the exfiltrated material remain unconfirmed.

Why it matters

Exposure of internal county files can create downstream risks for residents whose records are held by the government, including potential misuse of personal information for fraud or identity-related crimes. For the county itself, the incident may complicate ongoing operations and require resources for investigation, system restoration, and notification obligations. Because the scale of exposure is still unknown, the full extent of these consequences cannot yet be measured.

If your data was in this claimed breach

Monitor official statements from Trumbull County for any future notifications or guidance. Individuals can request a free exposure scan of their email address through established breach-checking services to determine whether their information appears in known public data sets. Changing passwords for any county-related accounts and enabling multi-factor authentication on linked services are standard initial precautions while more details are awaited.

AICompiled with AI assistance from public sources and published under our editorial standards.

Editorial & sourcing policy
Recent Breaches is a breach-monitoring service and news aggregator. We do not exfiltrate, host, purchase, or redistribute stolen data, and we do not hold the data claimed in leak-site listings. Incidents are compiled from publicly accessible sources and threat-intelligence platforms and are reported as claims attributed to their source. We promptly correct or remove material shown to be inaccurate — write to support@galaxywarden.com or press@recentbreaches.com.
Check if you’re exposed →

How this breach connects

Company

Attributed to

Method

CompanyTrumbull County security record
84/100
DoxxScan™ · Low doxx risk
B- 76Above-average record

1 reported incident on record.

See Trumbull County’s full breach history →

More recent breaches

Woodglen Medical Group Listed by anubis Ransomware GroupDecember 23, 2025Deibel Laboratories Listed by anubis Ransomware GroupDecember 19, 2025Beyer Law Group Listed by anubis Ransomware GroupDecember 16, 2025Smith Fire Systems Listed by anubis Ransomware GroupDecember 4, 2025

Latest breaches

Read GalaxyWarden’s full analysis of the Trumbull County Listed by anubis Ransomware Group →

Source: threat-actor leak-site listing

Publicly posted by anubis — unverified claim, pending independent verification

Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.

ShareXLinkedInFacebookRedditWhatsAppTelegram