On December 3, 2025, German premium steel trading company Buhlmann Group appeared on the leak site of the Akira ransomware group. The attackers claim to have exfiltrated more than 55 GB of internal corporate data and say they will publish it soon. The files reportedly include employee personal documents, customer information, contracts, financial records, project files, drawings, specifications and confidentiality agreements.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Buhlmann Group
Get alerted the next time Buhlmann Group files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Buhlmann Group’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Reported Details of the Incident
Public reporting indicates the listing occurred on the official Akira leak portal. The group states it obtained the data during a ransomware intrusion and has not yet uploaded the full archive. Available reporting describes the exposed material as a broad mix of business and personal records rather than a single database dump. No confirmed victim count for individuals has been released, but the volume and variety of documents suggest that current and former employees, customers and business partners could be affected.
Employee personal documents and customer information are explicitly named in the attackers’ description. The company, which supplies steel pipes and fittings to the energy, chemical, shipbuilding and machine-construction sectors, has not issued a public statement at the time of writing.
Why This Matters for You and Your Family
When a company you work for, buy from or have a contract with suffers a breach like this, your personal details can end up in the hands of criminals. A single leaked employment record, contract or customer file can contain your full name, address, date of birth, national ID number, bank details or contact information. Once that data leaves the company’s control, you lose the ability to limit who sees it.