DreamWall Listed by akira Ransomware Group

On May 30, 2024, Belgian animation and graphics studio DreamWall appeared on the leak site of the Akira ransomware group. The listing states that the company, a partnership between Dupuis and RTBF based in Charleroi, suffered a ransomware attack in which attackers exfiltrated roughly 15GB of internal files. The disclosure indicates these files include personal data, medical files, contracts, agreements with other companies, and financial data. The number of individuals whose information was taken remains unknown, as the leak-site listing does not quantify affected records.

Reported Details from the Listing

The Akira leak page explicitly lists DreamWall and describes the stolen material as internal files taken during a ransomware incident. It highlights categories such as personal data, medical files, contracts, inter-company agreements, and financial records. The group states the total volume of exfiltrated data is approximately 15GB and notes that the files will be made available soon. No exact count of impacted individuals or households is provided, and the precise date of initial compromise is not disclosed in the listing.

The primary source makes clear that the data was not simply encrypted but actively exfiltrated before any ransom demand was refused, a standard double-extortion tactic.

Why This Matters for You and Your Family

When a studio like DreamWall is breached, ordinary people who interacted with the company can find their information exposed. If you or your family members have ever provided personal details, medical information, or signed agreements connected to DreamWall’s media, animation, or virtual-creation projects, those records may now sit in an attacker-controlled archive. Medical files are especially sensitive because they can reveal health conditions, treatments, or insurance details that criminals can exploit for identity theft, insurance fraud, or targeted phishing.

Financial data and contracts often contain addresses, bank-account references, tax identifiers, and signatures. Once leaked, this information does not expire. It can be sold quietly on underground forums long after the initial Akira listing disappears, increasing the chance that you or your children become targets months or years later.

Doxxing and Identity-Chain Risks

Personal data stolen from creative studios frequently links real identities to usernames, email addresses, and project-specific handles. Attackers can combine the DreamWall files with other breaches to build detailed profiles. A medical file might list a child’s name and date of birth; a contract might tie that name to a parent’s email address used for gaming accounts or social media. These connections create doxxing chains that lead to harassment, account takeovers, or physical stalking.

Credential leaks of this type routinely cascade into gaming platforms. Children’s accounts that reuse an email or password from a parent’s work-related registration become easy targets. Once an attacker controls a gaming profile tied to the same household address, further personal details can be extracted through social engineering or linked via public friend lists and shared payment methods.

Akira Ransomware Group Track Record

Public reporting attributes the Akira group’s emergence to early 2023. The actors have since compromised organizations across North America, Europe, and Australia, with a focus on mid-sized businesses in manufacturing, technology, and professional services. Notable prior victims include municipalities, healthcare providers, and creative agencies. Their typical playbook begins with initial access gained through compromised remote-desktop credentials or exploited vulnerabilities, followed by lateral movement, data exfiltration, and deployment of ransomware. After exfiltration, Akira posts samples on their leak site and demands payment to prevent full publication. They rarely negotiate publicly but apply steady pressure by releasing additional data batches if unpaid.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Rotate any password you ever used at DreamWall or related services, and secure every account with 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same addresses and credentials.
• Let remediation specialists handle takedown requests for any exposed personal documents or broker listings that surface from this incident.

The DreamWall breach is a reminder that even creative studios holding modest client lists can expose sensitive personal and medical information that fuels long-term identity crime. Staying ahead requires more than reactive checks. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and over 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today and close the gaps before the next leak appears.