Akira ransomware group claims data breach at PEPRO

• Ransomware group: Akira
• Country: United States
• Sector: Technology
• Announcement date: July 16, 2025

The Akira ransomware group has published an announcement on its leak site claiming a data breach involving the technology company PEPRO. According to the claim, the attack occurred on May 20, 2025, and the announcement was made on July 16, 2025. This development highlights the ongoing threat posed by ransomware collectives that target specialized industrial and technology sectors.

Details of the alleged attack

The Akira group claims to have successfully obtained over 15 GB of corporate documents belonging to PEPRO. The group has stated that this data is currently being prepared for publication on their leak site. This behavior is a hallmark of the double-extortion strategy frequently employed by modern ransomware actors. In a double-extortion scenario, attackers do not merely encrypt a victim's files to disrupt operations; they also exfiltrate sensitive information to use as leverage. By threatening to release stolen data publicly, the attackers aim to pressure the organization into paying a ransom to prevent the exposure of confidential information.

While the group has made these claims, no screenshots of the stolen data have been provided in the announcement to verify the contents. The group has not disclosed a specific ransom demand or the exact number of files compromised during the incident.

Alleged compromised data types

The information allegedly stolen by the Akira group is said to include a variety of sensitive corporate and personal records. The data reportedly consists of the following categories:

• Employee personal documents
• Customer information
• Accounting and financial data
• Agreements
• Non-disclosure agreements

About PEPRO

PEPRO LLC is a technology company that manufactures patented EMP and EMI shielded enclosure systems. These specialized systems are designed for mission-critical and remote communication applications, where protecting electronic components from electromagnetic interference is essential.

Impact and security implications

This alleged data breach may pose significant risks of identity theft and fraud for both PEPRO's employees and its customers, given the nature of the personal and customer information mentioned. Furthermore, the exposure of corporate financial data could lead to a loss of business reputation and a decrease in competitive advantage for the organization. As a United States-based entity, the company may face data breach notification obligations under state laws and federal regulations regarding the protection of sensitive information.

Given the Akira group's known double-extortion tactics, it is possible that the leaked data could be utilized for secondary attacks or targeted phishing campaigns. Such campaigns often use stolen personal or corporate details to gain trust and trick employees or clients into providing further access or funds. Additionally, the group's tendency to exploit VPN vulnerabilities suggests that the organization's network security processes may require a thorough re-evaluation.

For organizations in the technology and manufacturing sectors, maintaining robust security postures is critical. Common defensive steps for organizations facing such threats include implementing multi-factor authentication (MFA) across all remote access points, such as VPNs, to mitigate the risk of credential exploitation. Regular patching of edge-facing software and continuous monitoring of network traffic can help detect unauthorized data exfiltration. Furthermore, maintaining strict access controls and conducting regular audits of sensitive data repositories can limit the scope of a potential breach if an initial perimeter is compromised.