On August 15, 2025, the Akira ransomware group listed Jones Soda Co. on its leak site and announced plans to publish 66 GB of stolen corporate data. The files include employee records containing complete names, dates of birth, addresses, emails, phone numbers, and Social Security numbers, along with financial documents, payment details, credit card information, contracts, NDAs, and other sensitive materials. Anyone who has worked at or done business with the craft soda and cannabis-products company may now find their personal information at risk.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Jones Soda Co.
Get alerted the next time Jones Soda Co. files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Jones Soda Co.’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Reported Details of the Breach
Public reporting indicates that Akira gained initial access to Jones Soda’s network, exfiltrated the 66 GB archive, and then encrypted systems in a classic ransomware pattern. The company has not yet issued a formal public statement confirming the volume or exact contents. Available reporting describes the data as including employee personal information, internal financial records, payment and credit card details, and legal agreements with partners such as PepsiCo. No confirmed victim count has been released, leaving current and former employees, contractors, and business partners uncertain about their exposure.
Why This Matters for You and Your Family
When a company loses control of SSNs, dates of birth, addresses, and phone numbers, identity thieves gain the raw material needed to open accounts, file fraudulent tax returns, or impersonate you. If you or a family member ever worked at Jones Soda, your information could already be circulating among criminals. Even if you were not an employee, vendor contracts and payment records can expose your own details. These leaks do not expire; stolen data often resurfaces months or years later in new fraud schemes.
Credential leaks like this one frequently cascade into account takeovers on personal email, banking, and shopping sites where the same passwords were reused.