AllerVie Health Hit by ANUBIS Ransomware Attack, Exposing Sensitive Patient Data On December 23, 2025, AllerVie Health, a prominent provider of allergy and immunology services, disclosed a data breach stemming from a ransomware attack by the ANUBIS group. The cybercriminals claimed responsibility on November 26, 2025, via a post on the Tor network, nearly a month before the company publicly acknowledged the incident. AllerVie Health first detected the breach on November 2, 2025, determining that unauthorized actors had accessed sensitive personally identifiable information (PII) between October 24 and November 3, 2025. The compromised data included Social Security numbers, driver’s license or state ID numbers, and patient names. The ANUBIS group, known for targeting healthcare organizations, not only encrypted data but also threatened to leak stolen information unless ransom demands were met, increasing the risk of identity theft and fraud for affected individuals. The company reported the breach to the New Hampshire Attorney General on December 23, 2025, and began notifying impacted individuals by mail. As part of its response, AllerVie Health is offering complimentary credit monitoring and identity protection services through Cyberscout, a TransUnion company. A dedicated call center has been established for affected individuals seeking further information.