Akira ransomware group lists ASOLO DOLCE SAS on leak site

• Ransomware group: Akira
• Country: Italy
• Sector: Agriculture and Food Production
• Announcement date: April 7, 2025

Akira group claims data breach at ASOLO DOLCE SAS

The Akira ransomware group has officially listed the Italian food manufacturer ASOLO DOLCE SAS on its dedicated leak site. According to the announcement made by the threat actors, the group claims to have successfully exfiltrated a significant volume of corporate information belonging to the organization.

The incident was announced on April 7, 2025, with the group claiming the attack occurred on the same day. The threat actors assert that they have obtained over 17 GB of essential corporate documents. While the group has published this claim on their leak site, no screenshots were provided to verify the contents of the alleged breach.

Information regarding the Akira group remains relatively limited in the public domain. However, the group is known to employ double-extortion tactics during their operations. This methodology typically involves both encrypting a victim's systems and threatening to release sensitive data on a public leak site to increase pressure on the organization. Furthermore, the group frequently leverages compromised VPN accounts as a primary method for gaining initial access to target networks.

Claimed data contents and affected information

The announcement made by the Akira group specifies the types of sensitive information they claim to have stolen from ASOLO DOLCE SAS. The leaked data is said to include a variety of internal documents that could impact various stakeholders within the company's ecosystem.

According to the group's claims, the following types of data are involved in the breach:

• Employee contact information
• Customer contact information
• Financial data
• Audit reports
• Payment details

The exposure of such diverse datasets, ranging from personal contact details to sensitive financial records, represents a significant security event for the targeted organization.

About ASOLO DOLCE SAS

ASOLO DOLCE SAS is a prominent food manufacturer based in Italy. The company specializes in the production of various baked goods, specifically focusing on the manufacturing of rusks, biscuits, and preserved pastry products. As a player in the agriculture and food production sector, the company maintains various operational and commercial relationships that rely on the integrity of its corporate data.

Risk assessment and potential implications

The potential impact of this incident is multifaceted, affecting both the organization and the individuals associated with it. The exposure of employee and customer contact information significantly increases the risk of identity theft. Furthermore, such data can be utilized by malicious actors to launch highly targeted phishing attacks against the individuals involved, using the stolen information to gain trust.

From a corporate perspective, the exposure of financial data, including audit reports and payment details, could potentially lead to operational disruptions and a loss of competitive advantage. Because ASOLO DOLCE SAS is based in Italy, this incident may trigger legal and administrative sanctions under the European Union's General Data Protection Regulation (GDPR), which governs the protection of personal data within the region.

Additionally, given the double-extortion methodology utilized by the Akira group, the publication of this data may create secondary risks for the company's supply chain partners. When a manufacturer's data is leaked, the interconnected nature of modern food production means that partners may also face increased exposure to cyber threats. Organizations in this sector can mitigate such risks by implementing robust security measures, such as multi-factor authentication, particularly for VPN access, and maintaining rigorous data encryption protocols to protect sensitive financial and personal information.