Akira ransomware group claims data breach at Milliman Financial Risk Management LLC

• Ransomware group: Akira
• Country: United States
• Sector: Financial Services
• Announcement date: October 6, 2025

The Akira ransomware group has announced a significant data breach involving Milliman Financial Risk Management LLC. According to an announcement posted on the group's leak site on October 6, 2025, the threat actors claim to have exfiltrated a substantial amount of sensitive information belonging to the firm.

Details of the alleged attack

The Akira group claims that the incident occurred on September 25, 2025. According to the threat actor's announcement, they have successfully compromised data belonging to Milliman Financial Risk Management LLC. The group has stated their intention to publish a dataset totaling 260 GB, which reportedly contains various types of corporate data, client portfolios, and operational files.

The group has indicated that this data will be released on their dedicated leak site in the near future. While the threat actor has made these claims, no screenshots were provided in the announcement to verify the contents of the stolen data. No information was provided regarding a ransom demand or the specific number of files involved in the breach.

Claimed data contents

The information allegedly stolen by the Akira group is described as being highly sensitive, potentially impacting both the corporation and its clients. The group claims the leak includes a wide variety of documentation and financial records. Specifically, the following types of data are said to be involved:

• Client financial portfolios
• Account balances
• Transfer details
• Internal operational files
• Financial and accounting records
• Contracts
• Project files

The breadth of this alleged data set suggests a comprehensive breach of the organization's digital environment, covering everything from internal administrative files to sensitive client-facing financial information.

Organization profile

Milliman Financial Risk Management is a global firm that provides financial risk management solutions specifically for the retirement savings industry. Operating as a subsidiary of Milliman, Inc., the company specializes in investment portfolios and risk management strategies.

Impact assessment and industry implications

Given that the institution provides specialized financial risk management services, this alleged leak may pose a significant risk of exposing sensitive financial information. The potential publication of client account balances and transfer details could lead to various secondary risks, such as identity theft or targeted phishing attacks at both individual and corporate levels. Furthermore, as a United States-based entity, a potential data breach of this nature may result in legal consequences under state-level data protection laws and financial regulations.

The situation highlights the tactics used by modern ransomware groups. Akira appears to be employing double-extortion tactics, a method where attackers not only encrypt an organization's systems but also steal sensitive data to use as leverage. By threatening to release the data publicly, the group exerts pressure on the institution's operational continuity and its professional reputation. This type of pressure is designed to force the victim into compliance to prevent the exposure of proprietary and client information.

In such scenarios, secondary risks may also emerge for the institution's supply chain partners and clients, who may find themselves targeted due to the exposure of the primary victim's data. Organizations operating within the financial services sector often face these heightened risks due to the high value of the data they manage. To defend against such threats, organizations typically focus on robust data encryption, strict access controls, and continuous monitoring of their networks to detect unauthorized exfiltration attempts early.