Australian hydraulics and processing company Aussie Fluid Power (AFP) suffered a cybersecurity breach attributed to the Anubis ransomware group, which claimed responsibility and published stolen data on the dark web. The attackers allegedly accessed a limited number of IT systems without authorization, exfiltrating accounting files, contracts, and confidential company documents. While AFP’s investigation is ongoing—with support from external forensic specialists—early findings suggest business information may have been compromised, though no evidence yet confirms exposure of sensitive employee, customer, or supplier data.The company has notified the Australian Cyber Security Centre (ACSC) and relevant authorities, while implementing additional security measures to mitigate further risks. The Anubis group, operating as a ransomware-as-a-service (RaaS), has escalated pressure by contacting regulatory bodies and offering exclusive access to the stolen data—a tactic to coerce ransom payments. AFP has informed partners and customers but maintains that critical operational systems remain unaffected.This incident underscores persistent vulnerabilities in Australia’s industrial and mid-sized enterprises, which are increasingly targeted by ransomware actors, posing risks to the nation’s critical supply chains. The breach’s full scope, including potential data leaks or financial/reputational damage, remains under assessment.