Akira Claims 10GB Data Theft from Kruse Construction

Summary
Akira claims it will publish about 10GB of data allegedly taken from Kruse Construction, including employee, project, contract, financial, and customer records. The claim is unconfirmed.
Key points
- The monitoring record names Kruse Construction, a mechanical contractor serving the petroleum and petrochemical sector, as the alleged victim.
- The claim is attributed to the Akira ransomware group and monitored by ransomware.live.
- Akira allegedly threatened to publish approximately 10GB of corporate data.
- The claimed data includes employee documents, project and contract records, financial information, and customer files.
- The article says the claim has not been independently confirmed.
Article Details
- Victim
- Kruse Construction
- Encryption Status
- Not reported
- Exfiltration Status
- Claimed by the attackers; not independently confirmed
- Exfiltrated Data
- The attackers reportedly claimed the data included employee documents, passports and driver's licenses, project and contract records, financial records, and customer files.
- Exfiltrated Size
- Approximately 10 GB, as claimed
- Leak Status
- The attackers reportedly said the data would be uploaded soon; publication is not confirmed.
Threat Actors
Industries
ConstructionKruse Construction, a mechanical contractor serving the petroleum and petrochemical sector, reported a ransomware incident attributed to the Akira threat actor, claiming the compromise of sensitive corporate dataPetroleum and petrochemicalKruse Construction, a mechanical contractor serving the petroleum and petrochemical sector, reported a ransomware incident attributed to the Akira threat actor, claiming the compromise of sensitive corporate data
