The Adams County Communication Center orADCOM911 Listed by Akira Ransomware Group

On June 9, 2023, the Akira ransomware group listed the Adams County Communication Center, also known as ADCOM911, on its leak site and claimed to have exfiltrated 40GB of the dispatch center’s internal files and databases.

Details in the Akira Listing

The primary disclosure on the Akira leak site states that ADCOM911, a public safety communications and dispatch center serving Adams County, Colorado, was compromised in a ransomware attack. The listing explicitly notes that the attackers took 40GB of data and DBs containing “detailed information.” It does not specify the exact types of records beyond describing them as internal files, nor does it quantify how many individuals may be affected. The group announced it would soon make samples or the full archive available to anyone interested and added a complimentary note praising the quality of ADCOM911’s data services.

Public reporting on Akira indicates the group typically posts victim data after encryption and failed ransom negotiations. In this case the disclosure confirms exfiltration occurred, but the precise contents remain unknown to the public because the leak site does not publish a full data inventory.

Why This Matters for You and Your Family

When a 911 dispatch center is breached, the data exposed often includes records that tie directly to ordinary residents who called for emergency help. Call logs, incident reports, address details, phone numbers, and sometimes medical or family information can appear in such systems. Even though the exact volume of personal records is not stated, any leak from a communications center creates immediate privacy risk for households in that jurisdiction.

ADCOM911 serves Adams County, Colorado, meaning local families, children, and elderly relatives who have dialed 911 in the past three years could have their information sitting in the 40GB archive now controlled by ransomware operators. Once that data leaves the secure government environment, it can be sold, published, or used to launch follow-on fraud and harassment campaigns against ordinary people.

The Doxxing and Identity-Chain Risk

Ransomware leaks rarely stop at one dataset. Information taken from dispatch systems frequently contains names, addresses, dates of birth, phone numbers, and incident notes that attackers can cross-reference with other breaches. These linkages create long identity chains that reveal where you live, who your family members are, and which online accounts are likely tied to the same household. A single exposed 911 call can therefore cascade into doxxing that includes social-media profiles, children’s gaming usernames, and school-related records.

Credential leaks like this one often spread to underground forums where gamers and family members become secondary targets. Children’s Xbox, PlayStation, or Roblox accounts that reuse an email or password from a parent’s compromised record are especially vulnerable to takeover and subsequent harassment.

Akira’s Publicly Known Track Record

Public reporting attributes the emergence of Akira to early 2023. The group has since hit healthcare providers, municipalities, manufacturers, and technology companies across the United States, Europe, and Australia. Notable prior victims include several U.S. school districts and at least one regional hospital system. Akira’s typical playbook begins with initial access gained through compromised remote-desktop credentials or exploited VPN appliances, followed by rapid lateral movement inside the victim network, exfiltration of sensitive files, deployment of their custom ransomware encryptor, and finally extortion via dual leak-and-encrypt pressure.

The group’s leak site is used both to shame victims and to auction or freely distribute stolen data when ransom demands are ignored. In the ADCOM911 case the operators appear to have followed this pattern exactly, posting the organization on June 9, 2023, and promising to release the 40GB archive soon after.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity so you can see exactly what chains back to the Adams County breach.
• Rotate any password you have ever used for government, email, or emergency-service portals and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that could be chained to the same leaked address or phone.
• Let remediation specialists handle data-broker takedown requests and opt-out filings on your behalf while you focus on securing day-to-day accounts.

The ADCOM911 breach is a reminder that even essential public-safety infrastructure can become a vector for mass exposure of ordinary families. Taking concrete steps now limits how far attackers can travel down the identity chain created by this and future incidents. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that explicitly includes children’s gaming accounts at risk of cascading takeovers.