Duhabex Listed by anubis Ransomware Group

On December 5, 2025, the Polish international transport and logistics company Duhabex appeared on the leak site of the Anubis ransomware group, with the attackers claiming to have exfiltrated internal files during a ransomware attack.

What's Publicly Reported from Reporting

Public reporting indicates that Duhabex, a logistics firm operating in Poland and internationally, was listed by the Anubis ransomware operators. The data exposed consists of internal files that the group says were taken before encrypting systems. The exact number of people whose personal information is contained in those files remains unknown, as neither the company nor the attackers have released a full sample or victim count. Available reporting describes the incident as a classic ransomware deployment involving both encryption and data theft, with the leaked material now hosted on the group’s onion site.

Why This Matters for You and Your Family

When a logistics company like Duhabex suffers a breach, the files often contain names, addresses, phone numbers, email accounts, national identification details, and sometimes payment or contract information belonging to customers, employees, and business partners. If your family has shipped goods, worked with a logistics provider, or had records stored by any transport firm, your information could be sitting in that dataset. Once stolen, these details do not expire. They can be sold quietly on underground forums and later combined with other leaks to build a complete profile of your household. For ordinary families this means higher risk of identity theft, fraudulent accounts opened in your name, and unexpected targeting by scammers who already know where you live and how to reach you.

The Doxxing and Identity-Chain Implications

Credential leaks of this type rarely stay isolated. A single exposed email or phone number from a logistics breach can be linked to your social-media handles, children’s gaming accounts, and online shopping profiles. Attackers use these connections to map an identity chain that leads directly to you and your family members. Public reporting shows that once such chains are built, doxxing escalates quickly: published home addresses, family photographs, and live contact details appear on harassment forums. Gaming accounts belonging to children are especially vulnerable because parents often reuse passwords across work-related logistics portals and family entertainment services. A breach like Duhabex therefore becomes the first link in a chain that can end in account takeovers, swatting attempts, or sustained online harassment.

Anubis Ransomware Group Track Record

Public reporting attributes Anubis as a ransomware operation that emerged in 2024. The group has claimed responsibility for attacks on organizations across Europe and North America, with notable prior victims including manufacturing, healthcare, and logistics companies. Their typical playbook begins with initial access through phishing or exploited remote desktop services, followed by deployment of ransomware that both encrypts data and exfiltrates sensitive files. They then extort victims by threatening to publish the stolen information on their leak site if ransom demands are not met. The group maintains a public-facing onion portal where they post victim names and samples, applying pressure through deadlines that can range from days to several weeks.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what the Duhabex files may have exposed.
• Rotate any password you used on Duhabex or similar logistics portals anywhere it has been reused, and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your family is caught in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and your children’s gaming accounts, which often chain back to the same addresses and credentials.
• Let remediation specialists handle takedown requests across data brokers and leak sites so you do not have to chase every copy of your information manually.

The Duhabex breach is a reminder that logistics companies hold far more personal data than most people realize, and that data is now fuel for ransomware groups who move faster than most families can react. Starting with a clear map of your exposure and putting continuous safeguards in place gives you the best chance of staying ahead of the next link in the chain. DoxxScan by GalaxyWarden delivers that combination of continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.