Selenis (Evertis is also involved) Listed by Akira Ransomware Group

On May 8, 2025, the Akira ransomware group added Selenis — and its affiliate Evertis — to its leak site, announcing it had stolen more than 70GB of internal corporate documents. The files include detailed client personal information such as passports, medical records, drivers licenses, confidential court files, and financial data. Selenis, part of the family-owned IMG Group with decades in the polymers industry, has not yet confirmed the breach publicly, but the posted samples and threat actor’s claims indicate that thousands of individuals whose sensitive records were held by the company may now be exposed.

What Public Reporting Shows

Public reporting on the Akira leak site describes the exfiltrated material as containing extensive client documentation, including passports, medical records, driver’s licenses, court files, financial records, and NDAs. The total volume claimed exceeds 70GB. No exact number of affected individuals has been released, and available reporting does not specify precisely when the initial intrusion occurred. The data was listed for download or extortion on the group’s dedicated leak portal on May 8, 2025.

Why This Matters for You and Your Family

When a company that holds your passport scan, medical history, or financial details loses that information, the risk extends far beyond a single stolen password. Criminals can combine these records with other leaks to build a complete profile of you and your household. For ordinary families this often leads to identity theft, fraudulent loan applications in your name, or targeted scams that reference your children’s medical or school records. The exposure of court files and NDAs can also reveal sensitive family matters that were never meant to be public.

The Doxxing and Identity-Chain Implications

Documents like passports and driver’s licenses frequently contain addresses, dates of birth, and family-member names that link multiple online handles to real-world identities. Once attackers possess even a few of these connections, they can map an entire household across social media, gaming platforms, email accounts, and financial services. Credential leaks of this type regularly cascade into account takeovers, especially on gaming platforms where children’s accounts are often secured with the same reused passwords or recovery emails as adult accounts. The result is a doxxing chain that can expose your home address, family relationships, and daily routines.

Akira Group’s Publicly Known Track Record

Public reporting attributes the Akira ransomware operation to a group that first emerged in 2023. The actors have targeted organizations across multiple sectors, with notable prior victims including municipalities, manufacturers, and professional-services firms. Their typical playbook involves initial access through compromised credentials or remote-desktop vulnerabilities, followed by claimed exfiltration of sensitive files before encryption. They then demand ransom and, if unpaid, publish samples or full datasets on their leak site with countdown deadlines. Available reporting describes their extortion style as direct and persistent, often contacting victims and third parties mentioned in the stolen data.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity so you can see exactly what this claimed breach connects to.
• Rotate any password you used at Selenis or Evertis and enable 2FA through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you or your family is caught within hours rather than months.
• Cover the household with DoxxScan family protection that includes dependents and children’s gaming accounts, which often chain back to the same addresses and recovery details leaked in incidents like this.
• Let remediation specialists handle takedown requests for any exposed personal documents appearing on data-broker or paste sites.

The speed with which stolen personal documents circulate means acting within days rather than weeks can limit the damage. Start by understanding exactly which pieces of your identity are now linked, then close the gaps before criminals exploit them. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Source: https://www.ransomware.live/id/U2VsZW5pcyAoRXZlcnRpcyBpcyBhbHNvIGludm9sdmVkKUBha2lyYQ==