Anubis Ransomware Gang Claims Attack on US Funeral Services Firm Newcomer Cremations
The criminal group has listed Newcomer Cremations, Funerals & Receptions on its dark-web pressure site, claiming to hold customer and internal documents. The company has not confirmed any incident.
Key points
- Anubis, a ransomware group, listed Newcomer Cremations, Funerals & Receptions on its dark-web leak site on 25 October 2026, claiming to hold customer and internal documents.
- Newcomer Cremations has not publicly confirmed any incident, and the claim could not be independently verified at publication time.
- Healthcare organisations have been Anubis's most frequent target in its recorded history.
- Listings like this are sometimes exaggerated or outright false, written by criminals to pressure a company into paying.
A ransomware group called Anubis has claimed it broke into Newcomer Cremations, Funerals & Receptions, a US funeral services provider, and taken customer and company files. The listing appeared on the group's dark-web pressure site on 25 October 2026, first observed by the monitoring service Ransomware.live.
Ransomware is malicious software that criminals use to lock a company's files and demand payment to restore access. Leak sites are pages these groups run on the dark web, a part of the internet not indexed by ordinary search engines, where they publish the names of companies they claim to have attacked: pay, or the data gets released.
The group's post describes the alleged stolen material in broad terms only: customer personal documents and the company's internal documents. Attackers write these listings to maximise pressure, and they're sometimes exaggerated or false. No individual names have been published, and Threat Vectr is not repeating any specifics from the listing.
How active is Anubis?
Healthcare organisations have been its most frequent target. Our first look at Anubis came on 22 July 2026, and healthcare listings have dominated its claimed victims throughout that period. Funeral services sit within that broader category.
| Metric | Figure |
|---|---|
| Most targeted sector | Healthcare |
| Listing date (Newcomer Cremations) | 2026-10-25 |
These figures reflect unverified criminal claims, not confirmed breaches.
Should you worry?
No breach has been confirmed, so there's no need to panic. Being named on a criminal group's site is still worth taking seriously, though.
Watch for phishing attempts: convincing fake emails or calls that reference Newcomer Cremations to trick you into handing over passwords or payment details. Anyone contacting you to offer compensation for a breach at this company should be treated as a scammer until proved otherwise.
Shared personal details with the company for funeral arrangements? Don't reuse that same password elsewhere. A password manager makes that easy to avoid.
The US Federal Trade Commission (FTC) has jurisdiction over consumer data privacy breaches at companies of this type. If Newcomer Cremations confirms an incident and operates in states with their own notification laws, affected customers could be entitled to a formal breach notification letter.
For now, the claim is unverified. A public statement from the company would be the moment to act on specific advice.
