Morton LTC, Reed Pope Law, American Public Television, Benchmark Connector, Radtke Contrac... Listed by akira Ransomware Group

On November 28, 2025, the Akira ransomware group listed five organizations on its leak site, including Morton LTC, Reed Pope Law, American Public Television, Benchmark Connector, and Radtke Contracting. The attackers claim to have exfiltrated roughly 22 GB of internal files from the companies, which provide services ranging from long-term care pharmacy solutions to public television programming and specialized industrial connectors.

Reported Details from Reports

Public reporting on the Akira leak site indicates the data consists of internal documents rather than a single customer database. The affected entities include a Canadian business law firm, a distributor of public television content known for programs featuring Julia Child and Fred Rogers, and several specialized service providers. No exact count of individuals whose information may have been exposed has been released. Available reporting describes the incident as a classic ransomware double-extortion event in which files are both encrypted and stolen prior to the public listing.

November 28, 2025 marks the date the group published the listing. The volume of material — 22 GB — suggests a broad exfiltration of contracts, employee records, client correspondence, and operational files across the five victims.

Why This Matters for You and Your Family

When organizations that handle health-care coordination, legal documents, or family-oriented programming suffer breaches, the ripple effects reach ordinary people. Your pharmacy records, legal agreements, donation history, or employment information may sit inside the stolen material. Once files appear on dark-web leak sites, they become accessible to identity thieves, scammers, and harassers who do not need advanced skills to search them.

Even if you never directly interacted with these five companies, shared vendors or overlapping service providers can still expose your data. A single leaked email or phone number is often enough to begin the linkage process that eventually reveals addresses, family member names, and financial details.

The Doxxing and Identity-Chain Risk

Stolen internal files frequently contain spreadsheets that link names, emails, phone numbers, and addresses. Attackers and opportunistic criminals then cross-reference this data with credential leaks from other breaches. The result is an identity chain: an email from one breach unlocks a gaming account, which reveals chat logs containing your child’s real name and school, which in turn exposes family photos or home addresses. Public reporting indicates these chains accelerate once initial documents surface on leak sites.

Credential leaks like this one commonly cascade into account takeovers. Gaming platforms are especially vulnerable because children often reuse passwords or email addresses tied to family accounts. A compromised Roblox or Minecraft login can quickly lead to doxxing when the attacker already holds supporting personal data from the ransomware haul.

Akira Ransomware Group Track Record

Public reporting attributes the Akira ransomware group with emerging in 2023. The group has targeted organizations across North America, Europe, and Australia, with prior victims including manufacturing firms, professional service providers, and healthcare-adjacent companies. Their typical playbook begins with initial access gained through compromised remote desktop credentials or phishing, followed by lateral movement inside the network, data exfiltration, deployment of ransomware, and finally dual extortion: demanding payment to decrypt files while threatening to publish the stolen data on their leak site if the ransom is not paid.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so you can see exactly what an attacker holding the 22 GB dataset could discover.
• Rotate any password you used at Morton LTC, Reed Pope Law, American Public Television, Benchmark Connector, or Radtke Contracting and enable 2FA through an authenticator app everywhere that same password appears.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces it is caught within hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same addresses and emails now at risk.
• Let remediation specialists handle takedown requests for any exposed personal documents or broker listings that appear after this incident.

The incident is a reminder that ransomware operators continue to harvest ordinary personal information from organizations you or your family may have only indirect contact with. Starting with a clear picture of your current exposure and maintaining ongoing visibility is the most practical defense. DoxxScan by GalaxyWarden delivers that visibility through continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage that includes children’s gaming accounts.