Old NationalEvents Plaza Listed by akira Ransomware Group

On January 9, 2025, the Akira ransomware group listed Old National Events Plaza on its leak site and began offering more than 100 gigabytes of the venue’s internal files for download via torrent. The data includes confidential licenses, agreements, contracts, financial audits, payment details, reports, and contact information for employees and customers.

Reported Details of the Breach

Public reporting indicates the attackers exfiltrated internal corporate documents from the 280,000-square-foot event facility in Evansville, Indiana. The Akira leak page describes the stolen material as containing licenses, contracts, financial records, and lists of employee and customer names, phone numbers, and email addresses. The group simplified access by packaging the files for torrent clients such as uTorrent, qBittorrent, and Transmission. No confirmed victim count has been released, and it remains unclear exactly how many individuals appear in the exposed contact data.

January 9, 2025 marks the public disclosure date on the ransomware site. The breach follows the group’s standard pattern of stealing data before encrypting systems and then using the threat of publication to pressure payment.

Why This Matters for You and Your Family

When an event venue’s customer database is stolen, anyone who has booked a wedding, corporate gathering, fundraiser, or birthday party at Old National Events Plaza may now have their personal details circulating among criminals. That single exposure can give attackers the email addresses, phone numbers, and sometimes payment information needed to launch convincing phishing campaigns or identity-theft attempts against you or members of your household. Children’s names linked to family events can also surface, creating long-term risks that stretch beyond the original breach.

The Doxxing and Identity-Chain Risks

Stolen contact lists rarely stay isolated. Attackers combine them with information from other breaches to build detailed profiles. An email address from this incident can be matched to gaming accounts, social-media handles, or school records, turning one leak into a chain that leads to doxxing or account takeovers. Credential leaks like this one frequently cascade into gaming platforms, where children’s accounts become entry points for further harassment or extortion. Once real identities are linked to online handles, the risk of targeted scams, swatting, or physical intimidation grows quickly.

Akira Ransomware Group’s Track Record

Public reporting attributes the Akira ransomware operation to a group that emerged in 2023. The actors have targeted healthcare providers, manufacturing firms, educational institutions, and municipal governments. Their typical playbook involves initial access through compromised remote desktop credentials or phishing, followed by exfiltration of sensitive files and deployment of ransomware. After encryption they publish samples on their leak site and demand payment to prevent full data release. Industry trackers note that Akira often sets short deadlines and follows through on publication when victims do not pay.

What to do

• Run a DoxxScan to map every link between your email addresses, phone numbers, handles, and real identity so you can see exactly what this claimed breach connects to.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next exposure is caught in hours rather than months.
• Rotate any password you used when registering for events at Old National Events Plaza and enable two-factor authentication with an authenticator app everywhere that password was reused.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same family address or parent email.
• Let remediation specialists handle takedown requests for any exposed personal records appearing on data-broker sites that surfaced because of this incident.

The incident shows that even a single vendor breach can pull your family into a larger identity web. Starting with a clear map of where your information appears and keeping continuous watch gives you the best chance of stopping the next stage before it begins. DoxxScan by GalaxyWarden delivers that continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.