Akira ransomware group claims data breach against Office Peeps, Nappie's Food Service, Janome America, IT-Supporten, and A-1 Pools

• Ransomware group: Akira
• Country: United States
• Sector: Professional Services
• Announcement date: March 30, 2026

The Akira ransomware group has issued an announcement on their leak site claiming responsibility for a significant data breach affecting multiple organizations. According to the group's claim, they have successfully exfiltrated approximately 13 GB of data belonging to five distinct entities: Office Peeps, Nappie's Food Service, Janome America, IT-Supporten, and A-1 Pools. This announcement, published on March 30, 2026, suggests a targeted operation aimed at extracting sensitive information from these organizations.

The details of the alleged attack

In the announcement posted on March 30, 2026, the Akira group alleges that they have compromised the data of Office Peeps, Nappie's Food Service, Janome America, IT-Supporten, and A-1 Pools. The threat actors claim to have gained unauthorized access to both the operational and personal data of these specific entities. While the group has made these claims public, they have not provided any screenshots to verify the content of the leaked data.

The group's communication suggests a high level of pressure on the victims, as it is indicated that the leakage of data may continue if the group's specific demands are not met. This tactic is a hallmark of modern ransomware operations, where the threat of public exposure is used as leverage during negotiations. The claim of the attack coincides with the date the announcement was made, March 30, 2026.

The scope of the claimed data exfiltration

Although the group has not provided visual evidence of the stolen files, they have provided a detailed list of the types of information they claim to have exfiltrated. The stolen data is said to encompass a wide variety of sensitive categories, ranging from internal corporate documents to highly private individual records. The group claims that the following types of data are involved in the breach:

• Personal employee data
• HR records
• Medical information
• Client information
• Project files
• Financial records

The breadth of this claimed data suggests that the breach could impact various facets of the affected organizations, from their internal administrative functions to their external relationships with clients and employees.

Implications and potential risks

The actions taken by the Akira group represent a classic example of the double-extortion tactic. In such scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also steal sensitive data to threaten the organization with its public release. This approach creates a dual threat: the immediate operational disruption caused by the ransomware and the long-term reputational and legal risks associated with a data breach.

For the employees and customers of the affected organizations, this breach could lead to significant secondary risks. The exposure of personal employee data and client information increases the likelihood of identity theft and the deployment of highly targeted phishing attacks. Because the affected entities are based in the United States, the nature of the leaked data—particularly the inclusion of medical information—could lead to serious legal repercussions under HIPAA or other relevant state-level data protection laws.

Regarding the technical methods used by this group, public information remains limited. However, it is known that Akira frequently exploits vulnerabilities in VPNs to gain initial network access. To mitigate such risks, organizations often focus on securing remote access points and implementing robust monitoring. Given the severity of these claims, it is advisable for the affected organizations to initiate their formal data breach notification procedures and proactively inform all parties who may have been impacted by the exposure of their information.