On September 10, 2025, First Fruits Farms in Prescott, Washington appeared on the leak site of the Akira ransomware group. The agricultural company, which grows apples and cherries, may have had internal files stolen during a ransomware attack. The attackers announced they would soon upload 26 GB of corporate documents that include employee personal documents such as SSNs, passports, and W-9 forms, along with detailed financial records, customer data, contracts, projects, drawings, and specifications.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch First Fruits Farms
Get alerted the next time First Fruits Farms files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about First Fruits Farms’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates the company was listed on the Akira ransomware leak site that same day. The group stated it had exfiltrated the data and planned to release 26 GB of files containing sensitive employee and business information. Available reporting describes the exposed materials as including Social Security numbers, passport copies, tax forms, financial statements, customer records, and technical project documents. No confirmed count of affected individuals has been released, and the precise method of initial access remains undisclosed in current public sources.
Why This Matters for You and Your Family
When a company that employs people in your community or sells products your family uses suffers a breach like this, your personal information can end up in the hands of criminals. SSNs, passports, and W-9 forms are high-value targets because they can be used to open accounts in your name, file fraudulent taxes, or impersonate you. Customer data and contracts can reveal where you live, work, or do business. Once that information is public, it rarely disappears on its own. Ordinary families end up dealing with the consequences for years through identity theft, unexpected bills, or unwanted contact from strangers who bought the data.
The Doxxing and Identity-Chain Risks
Stolen employee and customer records rarely stay isolated. A single leaked email, phone number, or address becomes the starting point for attackers to connect your gaming usernames, social-media handles, family member names, and home address. Public reporting shows these chains often lead to doxxing, where private details are published to harass or extort. Credential leaks like this one frequently cascade into account takeovers on gaming platforms, email, and banking services. Children’s gaming accounts are especially vulnerable because parents often reuse passwords or security questions that appear in workplace documents.