Taking stock of 2024| Part 2 Listed by Akira Ransomware Group

On February 4, 2025, the Akira ransomware group published a list of 27 companies whose internal files it says it stole during 2024 attacks, including intercomp.com.mt, saludsa.com.ec, 360energy.com.ar, and others. The posting on the group’s leak site states that data was exfiltrated after the attackers breached each company’s IT defenses. While the exact number of individuals whose personal information may have been exposed remains unknown, anyone whose records were held by these organizations could be affected.

What Public Reporting Shows

Public reporting on the Akira leak site indicates the group exfiltrated internal files from at least 27 named companies over the course of 2024. The February 4, 2025 post lists victims across sectors including healthcare, logistics, manufacturing, and technology. No specific volume of stolen records or detailed inventory of exposed data types has been published by the group. The message on the leak site claims the attackers “always act honestly and try not to disclose” unless payment is refused, a common ransomware pressure tactic.

Why This Matters for You and Your Family

When companies you deal with lose control of customer or employee records, the information can surface in unexpected places months or years later. Names, addresses, phone numbers, dates of birth, and financial details are frequently included in “internal files.” Once that data reaches criminal marketplaces, it can be used to impersonate you, open accounts in your name, or target your family members. Children’s records, often stored alongside parental information, can be especially attractive because minors’ data tends to remain valid for longer and is less likely to be monitored.

The Doxxing and Identity-Chain Risks

A single breach rarely stays isolated. Attackers routinely combine leaked credentials with publicly available information to build detailed profiles. An email address from one company’s files can be matched to a username on a gaming platform, a family address, or a social-media handle. These connections create doxxing chains that lead to harassment, targeted scams, or account takeovers. Credential leaks like this one frequently cascade into gaming account compromises because the same password or recovery email is reused across work, personal, and entertainment services.