Akira ransomware group claims data breach against Buffalo Games, Edaron, and Ceaco

• Ransomware group: Akira
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: October 30, 2025

Akira ransomware group claims data breach against Buffalo Games, Edaron, and Ceaco

The Akira ransomware group has announced a significant data leak, claiming to have compromised the systems of Buffalo Games, Edaron, and Ceaco. In an announcement published on October 30, 2025, the threat actor group stated that they have successfully exfiltrated a substantial amount of data belonging to these three entities. This development marks a targeted strike against organizations within the retail and e-commerce sector.

Details of the claimed attack

According to the announcement made on the group's leak site, the Akira group claims to have stolen 34 GB of data. The group has indicated that the stolen documents are scheduled to be published on their platform shortly. While the announcement confirms the intent to release the information, no screenshots were provided by the threat actor to verify the contents of the breach at the time of the post.

The claim suggests that the breach involves a wide array of sensitive information. The threat actor asserts that the compromised data includes both corporate documents and highly sensitive employee records. This type of breach often follows a pattern of double extortion, where attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive data to use as leverage during ransom negotiations.

Reported compromised data types

The threat actor claims that the following types of information have been compromised:

• Employee passports
• Driver licenses
• Social security cards
• W-9 forms
• Accounting information
• Contracts
• Client information

About the affected organizations

Buffalo Games is an American company headquartered in Buffalo, New York. The company specializes in the design and manufacturing of board games and puzzles. The breach involving this organization, alongside Edaron and Ceaco, highlights the potential risks faced by companies in the retail and e-commerce sectors during targeted cyberattacks.

Potential impact and security implications

The claims made by the Akira group pose a severe risk of identity theft for the employees and clients of the affected organizations. The sensitive personal data mentioned in the announcement, such as social security cards, passports, and driver licenses, could be utilized by malicious actors for targeted phishing attacks or various fraudulent activities. Such data is highly valuable on the dark web for identity impersonation.

Furthermore, because these entities are based in the United States, this incident may lead to significant legal repercussions. Organizations may face scrutiny and penalties under various state laws and federal data protection regulations regarding the handling and protection of consumer and employee data. The potential for operational disruptions and reputational damage is high, especially when considering the group's known tactics of double extortion.

In general, organizations facing such threats often implement defensive measures such as multi-factor authentication, regular security awareness training, and robust data encryption to mitigate risks. However, when a breach of this scale is claimed, the focus often shifts to incident response, legal compliance, and notifying affected parties to prevent further fraudulent use of the stolen information. Publicly available information regarding the specific methods used by the Akira group remains limited.