Grand Rapids Controls Listed by Anubis Ransomware Group

On August 15, 2025, manufacturing supplier Grand Rapids Controls appeared on the leak site of the anubis ransomware group, with attackers releasing 150 GB of internal files that include confidential documents and NDA agreements with automotive companies such as Ford, Bentley, and Lear.

What Public Reporting Shows

Available reporting describes a ransomware attack in which anubis exfiltrated data from Grand Rapids Controls before encrypting systems. The group published a sample of the stolen material on its dark-web leak site, totaling 150 GB. Exposed information includes internal company files and non-disclosure agreements signed with major manufacturers. Public reporting indicates the number of individuals whose personal data was contained in the files remains unknown. No evidence has surfaced that customer databases or payment card information were the primary target; the focus appears to be corporate documents.

Why This Matters for You and Your Family

When a supplier like Grand Rapids Controls is breached, the ripple effects reach ordinary people. Employees, contractors, and anyone whose personal details appear in those NDAs or internal spreadsheets can face identity theft, phishing campaigns, or blackmail attempts. If your employer works with automotive vendors, your name, address, or contact information may now sit in a ransomware data dump. For your family this means higher risk of fraudulent loans, tax fraud, or targeted scams that exploit leaked workplace relationships. Confidential documents often contain far more than business secrets — they can list home addresses, phone numbers, and family member references that criminals later weaponize.

The Doxxing and Identity-Chain Implications

Ransomware leaks rarely stop at one company. A single exposed email or phone number can link your professional identity to personal accounts across the internet. Attackers chain these fragments together: an NDA lists your work email, that email appears in a past breach, and suddenly your social-media handles, children’s school records, or gaming usernames become visible. This is exactly how doxxing escalates from corporate theft to personal harassment. Credential leaks like this one cascade into account takeovers on gaming platforms, where children’s accounts are frequently targeted because parents reuse passwords. Once initial access is gained, extortion demands often follow, using the threat of further data release to pressure victims into paying.