Akira ransomware group claims data breach at DELOPT

• Ransomware group: Akira
• Country: India
• Sector: Manufacturing
• Announcement date: April 4, 2025

The Akira ransomware group has published a leak announcement on its dedicated leak site, claiming to have stolen data belonging to the Indian technology firm DELOPT. The announcement, posted on April 4, 2025, suggests a significant breach involving a large volume of corporate and personal information.

The claimed attack and event details

According to the announcement made by the Akira group, the threat actor successfully targeted DELOPT on April 4, 2025. The group claims to have exfiltrated over 70 GB of data related to the company's various operations. While the group has posted the listing on their leak site, no screenshots were provided to verify the authenticity of the stolen files at the time of the announcement.

The group appears to be utilizing a pressure tactic by threatening to publish the sensitive corporate information. This method is a hallmark of modern ransomware operations, where the threat of public exposure is used to coerce the victim into meeting specific demands. In this instance, the group is asserting control over a massive dataset that spans multiple aspects of the organization's business functions.

Alleged data types and affected information

The information allegedly stolen by the Akira group is extensive and covers various sensitive categories. Based on the group's claims, the leaked data includes a wide range of corporate and personal documents. The specific items mentioned in the announcement include:

• Employee contact information
• Customer contact information
• Financial data
• Corporate agreements
• Passports

The inclusion of highly sensitive documents, such as passports and financial audits, suggests that the breach could have profound implications for the individuals involved. The group claims to have access to corporate NDAs, employee and customer contact details, corporate licenses, agreements and contracts, financial audits, payment reports, and personal documents like passports.

About DELOPT

DELOPT is an India-based technology company that specializes in defense electronics and electro-optics systems. Additionally, the company provides in-store technology solutions for the retail sector. DELOPT focuses on the development of high-tech products, primarily designed for defense and security applications, making its operational data particularly sensitive.

Impact assessment and industry implications

If the claims made by the Akira group are verified, the consequences for DELOPT and its stakeholders could be significant. The exposure of personal documents like passports and contact details means that employees and customers may face heightened risks of identity theft. Furthermore, the leak of financial data and corporate contracts could damage the company's commercial reputation and negatively impact its competitive position in the market.

The Akira group is known for employing double-extortion tactics. This strategy involves both encrypting a victim's systems and stealing sensitive data to use as leverage. Given this pattern, there is a possibility that the exfiltrated data could be utilized for secondary attacks or highly targeted phishing campaigns against the company or its partners. Such campaigns often use the stolen information to appear legitimate, making them harder for targets to detect.

For organizations operating in high-tech and defense-related sectors, such incidents highlight the critical importance of robust data protection measures. The exposure of sensitive information can lead to legal obligations under national data protection regulations, such as those in India, and can cause significant disruptions to operational processes. Organizations in these sectors typically focus on implementing strict access controls, continuous monitoring, and comprehensive encryption to mitigate the risks of data exfiltration and subsequent extortion attempts.