This paint company is dripping stolen information, hackers claim
The US branch of AkzoNobel, a multinational paint and coatings company from the Netherlands, has been attacked by hackers. They managed to steal approximately 170,000 files from the company.
The cyberattack was disclosed on LinkedIn by cybersecurity expert Erik Westhovens. According to him, the leaked data contains highly sensitive personal and confidential business information.
A ransomware operation called Anubis has claimed responsibility for the attack. On its leak site, the gang claims to have stolen copies of passports of employees, non-disclosure agreements (NDAs) from both customers and suppliers, other legal documents, and internal financial reports and overviews.
The extortion group alleges to have stolen 170GB of data.
AkzoNobel hasn’t formally responded to the claims of Anubis. However, a company spokesperson has confirmed that the intrusion has been contained and that the impact is limited.
“AkzoNobel has identified a security incident at one of our sites in the United States. The incident was limited to the respective site and was already contained. The impact is limited, and we are taking the appropriate steps to notify and support impacted parties, and will work closely with relevant authorities,” the spokesperson told BleepingComputer.
AkzoNobel produces and sells paints and coatings all across the globe, including decorative paints, enamels, varnishes, and surface preparation products; and a range of mixing machines, color concepts and advice, and training for applicators.
The company, which was founded in 1646, has over 31,500 employees and an annual revenue exceeding €10 billion.
Anubis is a ransomware operation that’s been active since December 2024. The group uses old-school extortion techniques and runs an affiliate program, offering everything from ransomware-as-a-service (RaaS) to initial access brokering, so that third parties can also profit from their attacks.
The Catawba Two Kings Casino Resort and Disneyland Paris fell victim to Anubis’s extortion practices in 2025.
Has your password leaked?
Unlock more exclusive Cybernews content on YouTube.
