Akira group claims data leak involving Swavelle Group and Wearbest Sil-Tex Mills

• Ransomware group: Akira
• Country: United States
• Sector: Manufacturing
• Announcement date: January 9, 2026

Akira group claims data leak involving Swavelle Group and Wearbest Sil-Tex Mills

The Akira ransomware group has announced a data breach targeting Swavelle Group and Wearbest Sil-Tex Mills. According to the group's announcement on their leak site, they claim to have exfiltrated a significant amount of corporate information belonging to the two entities. This claim was made on January 9, 2026, with the group asserting that the attack occurred on the same day.

Details of the alleged data breach

The threat actor behind the Akira group has provided specific details regarding the scale and nature of the stolen information. The group claims that approximately 165 GB of corporate data has been compromised. While the group has announced the breach, they have stated that the full dataset will be uploaded to their platform soon. The threat actor has shared various details regarding the specific content contained within the alleged leak.

The information allegedly stolen includes highly sensitive personal and corporate documentation. The leaked data is said to contain the following items:

• Social Security Numbers (SSN)
• Passport numbers and scans
• Driver's licenses
• Birth certificates
• Addresses
• Phone numbers
• Emails
• Client documentation
• Projects
• Non-disclosure agreements (NDAs)

The inclusion of such a wide variety of data types suggests a comprehensive breach of both employee and corporate records.

About Swavelle Group and Wearbest Sil-Tex Mills

Swavelle Group and Wearbest Sil-Tex Mills are textile manufacturers and suppliers. They provide a wide range of fabric solutions designed for residential clients as well as for furniture manufacturers. Based in New Jersey, these companies operate as a family-run business.

Potential risks and security implications

The nature of the alleged leak presents several significant risks to the affected organizations and the individuals involved. Because the data reportedly includes sensitive personal information such as SSNs, passport scans, and birth certificates, there is a high risk of identity theft for the employees and clients whose data was taken. Such sensitive information is often used by malicious actors to impersonate individuals for fraudulent purposes.

Furthermore, the companies may face legal obligations under United States regulations and relevant data protection laws due to the sensitivity of the leaked data. The breach could result in substantial operational and reputational damage. Beyond the initial leak, the organization may face secondary risks, such as targeted phishing attacks or attempts at double extortion. Double extortion is a common tactic used by ransomware groups where, after encrypting a network, the attackers threaten to release stolen data to pressure the victim into paying the ransom.

Regarding the method of intrusion, the Akira group has a known tendency to abuse VPN accounts, which may provide a clue as to how this specific network was accessed. For organizations in the manufacturing sector, maintaining robust security protocols is essential. This includes securing remote access points, implementing multi-factor authentication, and ensuring that sensitive employee and client documentation is heavily encrypted and monitored. Regular audits of access logs and strict management of third-party or remote connections are standard defensive steps to mitigate the risk of unauthorized entry into corporate networks.