Custom Engineered Wheels Listed by akira Ransomware Group

On December 3, 2025, the Akira ransomware group listed Custom Engineered Wheels on its leak site and announced it was prepared to publish 65 GB of the company’s internal files. The exposed data includes employee details such as dates of birth, phone numbers, home addresses, scanned documents, contracts, financial records, client information, and NDAs.

Reported Details of the Breach

Public reporting indicates that Custom Engineered Wheels, a manufacturer of polyurethane foam products used in industrial wheels, medical mobility aids, bicycles, and recreational vehicles, suffered a ransomware attack. The Akira group claims to have exfiltrated the 65 GB archive before encrypting systems or disrupting operations. No exact number of affected individuals has been disclosed, but the stolen material clearly contains personal information belonging to employees, their families, and business contacts.

The leak site posting explicitly lists categories of exposed records: employee DOBs, phones, addresses, document scans, agreements, confidential files, financials, client data, and NDAs. As of the publication date, the full archive had not yet been released for public download, but ransomware groups routinely follow through on such threats once negotiations fail.

Why This Matters for You and Your Family

When a company that employs people in your community is hit, the information stolen is rarely limited to corporate spreadsheets. Names, home addresses, dates of birth, phone numbers, and scanned identity documents can be combined with data from other breaches to build detailed profiles. If you or a family member works at a manufacturing, logistics, or supplier company, this incident shows how quickly your personal life can become part of a criminal data set.

Employee personal records are especially dangerous because they often include information about spouses and children listed on insurance forms or emergency contacts. Once those details surface, they can be sold on underground forums and used for identity theft, loan fraud, or harassment.

The Doxxing and Identity-Chain Risks

Ransomware operators rarely stop at posting generic “employee data.” They or subsequent buyers map connections between corporate emails, personal phone numbers, social-media handles, and family members. A single leaked home address can link a parent’s work account to a child’s gaming username if the same email or phone was ever reused. These identity chains allow attackers to move from one account to another, turning a workplace breach into long-term doxxing and account takeovers.

Credential leaks of this kind frequently cascade into gaming platforms. Children’s accounts tied to a parent’s reused password or recovery phone become easy targets once the corporate data appears on leak sites. Public reporting shows that such chains are a common path from ransomware dumps to full identity compromise.

Akira Ransomware Group’s Track Record

Public reporting attributes the attack to the Akira ransomware group, which emerged in 2023. The group has targeted organizations across manufacturing, healthcare, education, and professional services. Its typical playbook involves initial access through compromised credentials or remote desktop services, followed by exfiltration of sensitive files, deployment of ransomware, and later extortion via data-leak sites if payment is not received. Akira frequently lists victim companies with sample screenshots and detailed descriptions of the stolen data volume and types, as seen in the Custom Engineered Wheels posting.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Rotate any password you used at Custom Engineered Wheels or similar suppliers and enable 2FA through an authenticator app everywhere that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you or your family is caught in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that can be chained back to the same address or phone.
• Let remediation specialists handle takedown requests across data brokers and leak sites on your behalf while you focus on securing accounts.

The incident at Custom Engineered Wheels is a reminder that manufacturing and supplier companies hold large volumes of ordinary families’ personal data. Protecting yourself no longer ends with changing a password; it requires ongoing visibility into where your information surfaces and prompt action to break the chains attackers rely on. DoxxScan by GalaxyWarden delivers that continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to see exactly what is already exposed and close the gaps before the next leak appears.