Anubis Threatens to Leak Data It Claims Was Stolen From Fairlife
Summary
Anubis listed Coca-Cola and Fairlife on its leak site, claiming it had locked servers and exfiltrated 1 TB of data. Coca-Cola had disclosed a ransomware-related Fairlife production suspension; the group’s theft claims remain unconfirmed.
Key points
- Coca-Cola disclosed that production at subsidiary Fairlife had been suspended because of a ransomware attack; the full impact was still being assessed.
- Anubis listed Coca-Cola and Fairlife on its leak site on July 20, claiming it had locked servers and exfiltrated 1 TB of confidential data.
- The group threatened to leak the data unless a ransom was paid within a week and offered to help restore systems.
- The article says Anubis has been active since December 2024 and has listed roughly 100 organizations.
- Anubis is described as using double extortion and having a reported wiper mode that can permanently delete victims’ files.
Article Details
- Victim
- Fairlife, a Coca-Cola subsidiary; Coca-Cola was also listed by Anubis
- Encryption Status
- Unconfirmed; Anubis claimed it had “locked” servers, which the article says likely means files were encrypted.
- Exfiltration Status
- Unverified; Anubis claimed it had exfiltrated data.
- Exfiltrated Data
- Anubis described the data as “confidential.”
- Exfiltrated Size
- 1 TB (claimed by Anubis)
- Ransom Demand
- Anubis demanded payment and gave Coca-Cola a week; the amount was not disclosed.
- Leak Status
- Threatened: Anubis said it would leak the data if payment was not made. No leak is reported.