Swavelle Group, Wearbest Sil-Tex Mills Listed by akira Ransomware Group

On January 9, 2026, the Akira ransomware group listed Swavelle Group Fabric Solutions and Wearbest Sil-Tex Mills on its leak site and announced plans to publish 165 GB of stolen corporate data containing detailed personal information of every employee.

Reported Details from Reporting

Public reporting indicates the two linked textile companies were hit by a ransomware attack in which internal files were exfiltrated. The data set described by the attackers includes SSNs, passport numbers and scans, driver’s licenses, birth certificates, addresses, phone numbers, emails, client documentation, projects, and NDAs. The Akira leak page states the full archive will be uploaded soon. Victim counts remain unconfirmed, but the breach covers employees of both the New Jersey–based family-run manufacturer Wearbest Sil-Tex Mills and its parent Swavelle Group.

Why This Matters for You and Your Family

When a company that employs friends, neighbors, or family members suffers a breach like this, the exposed records can be used to target you directly. A single stolen SSN or driver’s license combined with an email and phone number is often enough for identity thieves to open accounts, file fraudulent tax returns, or impersonate you. Because the files also contain client and project documents, vendors and customers may find their own information entangled in the leak. For ordinary households this means months or years of cleanup if the data surfaces on dark-web markets or public forums.

The Doxxing and Identity-Chain Risk

Credential leaks of this type rarely stop at one company. Employees often reuse the same email-password combination at banks, retailers, and online services. Attackers can follow the chain from a work email to personal accounts, then to social-media handles, then to children’s gaming profiles that list the same home address. The result is a complete identity map that enables doxxing, SIM-swapping, or targeted extortion. Public reporting on similar incidents shows these chains frequently lead to harassment campaigns against family members once the data is sold or published.

Akira’s Publicly Known Track Record

Public reporting attributes the attacks to the Akira ransomware group, which emerged in 2023. The group has previously listed healthcare providers, manufacturers, and professional-services firms. Its typical playbook involves initial access through compromised credentials or remote-desktop vulnerabilities, followed by exfiltration of sensitive files and deployment of ransomware. When payment is not received, Akira publishes samples and eventually the full archive on its leak site, using both volume and the sensitivity of personal employee data to pressure victims. Exact success rates are unknown, but the group continues to maintain an active leak page that lists new victims weekly.

What to do

• Run a DoxxScan to map every link between your work and personal emails, phone numbers, addresses, and online handles so you can see the full exposure chain created by this claimed breach.
• Rotate the password used at Swavelle or Wearbest anywhere it is reused, then enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information appears it is caught in hours, not months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which are frequently the weakest link in these identity chains.
• Let remediation specialists handle takedown requests across data brokers and leak sites while you focus on securing your own accounts.

The incident is a reminder that ransomware operators now treat employee personal data as their most effective lever. Protecting yourself and your family requires more than changing one password; it demands visibility into how your information travels across the internet and rapid action when new leaks surface. DoxxScan by GalaxyWarden delivers that visibility through continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects handles to real identities, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Starting that process promptly can limit the damage from this claimed breach and reduce exposure to the next one.