Summit Almonds Listed by Akira Ransomware Group

On March 13, 2024, California-based agricultural cooperative Summit Almonds appeared on the leak site of the Akira ransomware group. The listing states that attackers exfiltrated 33 GB of internal files during a ransomware incident and plan to publish them. Anyone whose personal information appears in those files — customers, growers, employees, or business partners — now faces immediate exposure of names, phone numbers, email addresses, NDAs, forms, and other documents containing sensitive details.

Details Released by Akira

The primary disclosure on the Akira leak site states that Summit Almonds, which helps market almonds, walnuts, and other tree nuts for California growers, was hit in a ransomware attack. Attackers claim to have taken 33 GB of internal files, including personal documents, NDAs, forms with personal information, and a database containing more than 10,000 lines of phone numbers and emails. The listing does not specify exactly how many individuals are affected, nor does it provide a full sample of the data. It simply states the material will be released if the cooperative does not meet the group’s demands. Public reporting on Akira indicates the group typically uses double-extortion tactics: encrypting systems where possible and threatening to publish stolen data.

Why This Matters for You and Your Family

If your contact details or documents were stored with Summit Almonds, this claimed breach puts you at direct risk. Phone numbers and emails are frequently used to launch phishing campaigns, SIM-swapping attempts, or identity-theft schemes. For farming families or small businesses that work with cooperatives like Summit Almonds, the exposure can feel especially personal — these records often link home addresses, family names, and financial arrangements in the same files. Even if you are not a grower yourself, any vendor, contractor, or customer whose information crossed the cooperative’s systems could now be targeted. The uncertainty around the exact number of affected people makes it harder to know whether you are in the dataset, which is why proactive checking is essential.

Doxxing and Identity-Chain Risks

A single leaked email or phone number rarely stays isolated. Attackers and opportunistic criminals chain these details with information from other breaches to build complete profiles. A phone number tied to an NDA or grower contract can quickly link to social-media accounts, children’s school records, or gaming usernames. Once those connections surface, full doxxing becomes possible — exposing home addresses, family relationships, and financial relationships to harassment or fraud. Credential leaks of this type frequently cascade into account takeovers, especially for shared family logins or children’s online gaming accounts that reuse the same email addresses. The Akira listing adds another public repository where criminals can freely download and cross-reference your data.

Akira’s Known Track Record

Public reporting attributes the Akira ransomware group’s emergence to early 2023. Since then the group has hit organizations across multiple sectors, including manufacturing, healthcare, and professional services. Notable prior victims include municipalities and mid-sized enterprises whose data later appeared on the same leak site. Akira’s typical playbook involves initial access through compromised remote-desktop credentials or phishing, followed by claimed exfiltration of sensitive files before deploying encryption where feasible. The group then demands payment to prevent publication, often giving victims a short deadline. The Summit Almonds listing follows this pattern exactly, with the group promising to release the 33 GB archive unless their conditions are met.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by specialists.
• Rotate any password you used at Summit Almonds or related nut-industry portals anywhere it has been reused, and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught in hours, not months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same emails or addresses leaked in incidents like this.
• Let remediation specialists manage takedown requests for any personal documents already appearing on data-broker or extortion sites.

The Summit Almonds breach is a reminder that agricultural cooperatives and their partners hold far more personal data than most people realize. Acting quickly can limit how far attackers are able to push the stolen information. DoxxScan by GalaxyWarden provides continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts at risk from cascading credential leaks. Start your DoxxScan trial today to regain control of your exposed information before criminals stitch it into larger attacks.