COSMED Listed by akira Ransomware Group

On February 14, 2025, medical device manufacturer COSMED appeared on the leak site of the Akira ransomware group. The attackers claim to have stolen more than 25 GB of internal corporate documents, including passport scans, NDAs, confidential files, financial audits, payment details, reports, and foreigner identity cards. Anyone whose personal information appears in those files — employees, contractors, business partners, or their families — now faces heightened risk of identity theft and doxxing.

Reported Details from Reporting

Public reporting indicates that COSMED, a privately owned company that produces cardiopulmonary, metabolic, and body composition diagnostic equipment, was listed by the Akira group on its data-leak portal. The posting states the attackers exfiltrated more than 25 GB of documents containing sensitive personal and corporate information. No exact number of affected individuals has been confirmed, and the company has not yet issued a public statement detailing the scope or timeline of the breach. Available reporting describes the exposed materials as including passport scans, signed NDAs, financial records, payment details, and identity cards for foreign nationals.

Why This Matters for You and Your Family

When a company that handles medical, financial, or travel documents is breached, the information rarely stays contained. Passport scans and identity cards can be used to open accounts in your name, apply for credit, or create fraudulent identities. Financial audits and payment details often contain enough context to make phishing attempts more convincing. If you or a family member ever worked with COSMED, received services from them, or had documents shared during a business relationship, your data could now be in attackers’ hands. Children’s information linked to a parent’s work records can also be exposed, creating long-term risks that grow as they reach adulthood.

The Doxxing and Identity-Chain Implications

Credential leaks and document dumps rarely stop at one incident. A single passport scan can be cross-referenced with email addresses, phone numbers, or gaming usernames found in other breaches. Attackers chain these fragments together to build complete profiles, leading to account takeovers, targeted phishing, or public doxxing. Gaming accounts belonging to you or your children are especially vulnerable because the same passwords or recovery emails are often reused across work, personal, and entertainment platforms. Once one account falls, the rest can follow in rapid succession.

Akira Group’s Publicly Known Track Record

Public reporting attributes the attack to the Akira ransomware group, which emerged in 2023. The group has targeted organizations across healthcare, manufacturing, education, and technology sectors. Notable prior victims include municipalities, manufacturing firms, and healthcare providers. Akira’s typical playbook involves initial access through compromised credentials or remote desktop vulnerabilities, followed by exfiltration of sensitive files before encryption. They then demand ransom and, if unpaid, publish samples or full datasets on their leak site to pressure victims. Their extortion style combines data theft with the threat of public release rather than solely relying on system encryption.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Rotate any password you ever used at COSMED or related vendors, and enable 2FA through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught in hours rather than months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same addresses and recovery details.
• Let remediation specialists handle takedown requests across data brokers and exposed records while you focus on securing your own accounts.

The incident underscores that medical and diagnostic companies hold some of the most sensitive personal documents we entrust to any business. Taking concrete steps now can limit how far this claimed breach travels. Start your DoxxScan trial and use its continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and family coverage including children’s gaming accounts to reduce the chances that this or future leaks turn into lasting harm for you or your family.