Huber , Erickson & Bowman Listed by akira Ransomware Group

On October 30, 2025, the Akira ransomware group added Huber, Erickson & Bowman to its leak site and announced plans to publish 66 GB of stolen corporate documents containing extensive personal information of the Salt Lake City accounting firm’s clients and employees.

Reported Details from Public Reporting

Available reporting describes the victim as HEB Advisors, a tax and accounting firm in Salt Lake City with more than 45 years in business. The Akira group states it exfiltrated internal files that include client and employee addresses, phone numbers, dates of birth, driver’s licenses, Social Security cards, credit cards, detailed accounting records, and other confidential documents. The attackers have not yet uploaded the full archive but have warned they will do so soon. No exact number of affected individuals has been confirmed.

Why This Matters for You and Your Family

If you or anyone in your household has used HEB Advisors for tax preparation, accounting, or business services, your personal documents may now sit on a ransomware leak site. A single breach like this can hand criminals the exact combination of details needed to open accounts in your name, file fraudulent tax returns, or impersonate you with banks and government agencies. When the data belongs to an entire family—spouses, dependents, even elderly parents—the exposure multiplies. Children’s records mixed in with parental tax files create long-term risks that can follow them into adulthood.

The Doxxing and Identity-Chain Risks

Stolen tax documents rarely stay isolated. Public reporting shows that once names, addresses, Social Security numbers, and dates of birth appear on criminal forums, they are quickly linked to email accounts, phone numbers, and online usernames. This identity-chain process turns one breach into repeated targeting: credential-stuffing attacks on banks, insurance providers, and email services, followed by doxxing that publishes your home address and family details. Gaming accounts belonging to you or your children are especially vulnerable because kids often reuse pieces of personal information across platforms, giving attackers an easy path from a tax breach to full account takeover.

Akira Ransomware Group’s Known Track Record

Public reporting attributes the Akira ransomware operation to a group that emerged in 2023. The actors have targeted organizations across multiple sectors, encrypting networks and then exfiltrating data for double-extortion demands. Their typical playbook involves initial access through compromised credentials or remote desktop vulnerabilities, followed by lateral movement to harvest sensitive files. They publish samples on their leak site and threaten full release unless payment is made. Past victims have included law firms, manufacturers, and professional services companies, though exact success rates remain unclear from available reporting.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity so you can see exactly what chains back to the HEB Advisors breach.
• Rotate every password you ever used at the firm anywhere it has been reused, then enable two-factor authentication through an authenticator app on all important accounts.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next leak exposing you or your family is caught in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which frequently become targets when credential leaks cascade into doxxing chains.
• Let remediation specialists handle takedown requests across data brokers and leak sites while you focus on securing your own accounts.

The HEB Advisors incident is a reminder that professional services firms hold some of the most sensitive records about ordinary families. Taking concrete steps now can limit how far this claimed breach travels. DoxxScan by GalaxyWarden provides continuous monitoring across 13.1 billion+ breach records and 100-plus platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage that includes children’s gaming accounts—tools that directly address the cascading risks created by incidents like this one.