Susquehanna Glass Listed by Akira Ransomware Group

On December 2, 2025, family-owned Susquehanna Glass appeared on the leak site of the Akira ransomware group. The attackers say they will soon publish 35 GB of stolen corporate data that includes personal information of nearly 800 people — I-9 forms, passport scans, driver’s licenses, Social Security numbers, drug test results, financial records, and customer details.

What Public Reporting Shows

Public reporting indicates the company, now run by third-generation owner Walt Rowen, was hit in a ransomware incident. The Akira group posted a notice stating it had exfiltrated the files and plans to release them. No exact breach date has been disclosed, and the total number of people whose records were taken is listed as “almost 800.” The data categories match what is typically stored by a business that employs people and serves customers: employment eligibility forms, government ID copies, tax identifiers, and financial spreadsheets.

Available reporting describes the posted sample as proof of access rather than the full archive. Ransomware.live, which tracks leak sites, lists the entry under the direct link to Akira’s page for Susquehanna Glass.

Why This Matters for You and Your Family

When a company that employs people or holds customer records loses control of IDs, Social Security numbers, and financial documents, the risk does not stop at the office door. SSNs, passport scans, and driver’s licenses are the exact building blocks identity thieves need to open accounts, file fraudulent taxes, or impersonate you at government agencies. If your employer, your child’s sports league sponsor, or a small vendor you use gets hit, your family’s information can appear in the same bundle.

Ordinary families rarely learn about these incidents until weeks or months later. By then the data may already be circulating on multiple underground forums. The exposure of nearly 800 people’s full personal dossiers in one 35 GB package increases the chance that someone you know — a coworker, a neighbor, or your own household — will face follow-on fraud or harassment.

The Doxxing and Identity-Chain Risk

A single breach like this rarely stays isolated. The released files often contain email addresses, phone numbers, and dates of birth that attackers can cross-reference with gaming accounts, social-media handles, and public records. Once those links are made, a thief can move from “we have your SSN” to “we control your child’s Roblox or Fortnite account” within hours. Credential leaks cascade: the password reset for the work portal becomes the key to your personal email, which then unlocks banking or school logins.

Children’s gaming profiles are especially vulnerable because parents often reuse the same email or a familiar password pattern. Public reporting on similar incidents shows that attackers frequently chain corporate data to personal and family accounts, turning one breach into long-term doxxing and extortion attempts.

Akira Group’s Publicly Known Track Record

Public reporting attributes the attack to the Akira ransomware group. The group emerged in 2023 and has since targeted organizations across multiple sectors. Notable prior victims include municipalities, manufacturers, and professional service firms. Their typical playbook involves initial access through compromised credentials or remote desktop tools, followed by claimed exfiltration of sensitive files before encryption. They then demand ransom and, if unpaid, publish samples and eventually the full archive on their leak site. Extortion pressure is applied through direct contact and public shaming rather than solely through encryption.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity so you can see exactly what this 35 GB dump exposes about you and your family.
• Rotate the password you used at Susquehanna Glass anywhere else it is reused, then enable two-factor authentication through an authenticator app on every account that offers it.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next leak that touches your data is caught in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same addresses and identifiers released in incidents like this.
• Let remediation specialists handle takedown requests across data brokers and exposed profiles while you focus on securing your own logins and monitoring financial accounts for unusual activity.

The pace of ransomware leaks shows no sign of slowing. Families cannot prevent every breach, but they can make sure the next one does not become a multi-year identity nightmare. Start your DoxxScan trial today for continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping that links handles to real identities, hands-on remediation by specialists, and full household coverage that includes your children’s gaming accounts. Doing so turns a passive leak into an actionable defense for you and everyone at your address.