Akira Claims It Stole 40 GB of Data from Lufkin Accounting Firm

Summary

Akira listed Todd, Hamaker & Johnson, LLP on its leak site and claims it obtained about 40 GB of company and client data. Monitoring firms documented the listing; the firm did not respond to a request for comment.

Key points

Akira’s leak site listed Lufkin accounting firm Todd, Hamaker & Johnson, LLP in late June.
The group claims it obtained about 40 GB of data, including financial records, employee files, contracts, and personal information.
SOCRadar, DeXpose, and BreachSense independently documented the firm’s appearance on the leak site while monitoring ransomware activity.
The article provides no details about how or when the alleged intrusion occurred.
The firm did not respond to the publication’s request for comment; the alleged compromise remains unconfirmed.

Article Details

Victim: Todd, Hamaker & Johnson, LLP
Encryption Status: Unknown; the article does not report whether the victim's systems were encrypted.
Exfiltration Status: Alleged by Akira; the victim did not confirm the claim.
Exfiltrated Data: Akira claims it obtained client financial records, employee files, contracts and agreements, and personal information including Social Security numbers, driver's licenses, and passports.
Exfiltrated Size: Approximately 40 gigabytes, according to Akira's claim.
Ransom Demand: Not disclosed.
Leak Status: Listed on Akira's leak site; Akira threatened public release. No public release is reported.

Threat Actors

AkiraThe article identifies Akira as a ransomware group and reports that it listed Todd, Hamaker & Johnson, LLP on its leak site, claiming theft of approximately 40 gigabytes of data and threatening public release. The alleged theft and incident details were not confirmed by the victim.

Vendors

Breachsensehave drawn the attention of several cybersecurity intelligence firms, including SOCRadar, DeXpose and BreachSense, all of which independently documented the firm’s appearance on Akira’s dark web site while monitoring DeXposeThe allegations have drawn the attention of several cybersecurity intelligence firms, including SOCRadar, DeXpose and BreachSense, all of which independently documented the firm’s appearance on Akira’s dark web site SOCRadarThe allegations have drawn the attention of several cybersecurity intelligence firms, including SOCRadar, DeXpose and BreachSense, all of which independently documented the firm’s appearance on Akira’s dark web site

Industries

accountingA Lufkin accounting firm has been listed by the Akira ransomware group, which claims it stole approximately 40 gigabytes of sensitive client and employee data and is threatening to release the information publicly.