Akira ransomware group lists Domina Entrega Total on leak site

• Ransomware group: Akira
• Country: Colombia
• Sector: Transportation
• Announcement date: March 14, 2025

The Akira ransomware group has listed the Colombian organization Domina Entrega Total on its dedicated leak site. According to the announcement made by the threat actors, the group claims to have successfully exfiltrated a significant amount of corporate data belonging to the company.

The details of the claim

The announcement regarding the potential breach was posted on March 14, 2025. While the listing was made in mid-March, the threat actors claim the actual attack occurred on March 8, 2025. The group asserts that they have obtained approximately 28 GB of corporate documents from the organization's systems. The listing includes an announcement regarding the potential publication of this stolen data, a common tactic used by ransomware groups to pressure victims.

Ransomware groups often utilize leak sites to host information stolen during a breach. These sites serve as a public platform to demonstrate the success of an attack and to increase pressure on the victim through the threat of data exposure. This method is frequently associated with double-extortion tactics, where attackers not only encrypt a company's systems but also steal sensitive information to use as leverage during ransom negotiations.

Data allegedly involved in the breach

Although no screenshots were provided in the leak site listing to verify the contents, the Akira group claims that the stolen data contains a wide variety of sensitive corporate and personal information. The information allegedly held by the attackers includes:

• Employee contact information
• Customer contact information
• Corporate agreements
• Passport details
• Internal correspondence

The presence of such diverse data types, ranging from internal communications to highly sensitive identity documents like passports, suggests a broad compromise of the organization's digital environment.

Organization profile

Domina Entrega Total is a company based in Colombia that specializes in the logistics sector. The organization provides a range of services including digital services and business process outsourcing (BPO). The company's operational focus is centered on providing services that are built upon a foundation of security and trust.

Impact and assessment

The alleged exposure of this data carries significant risks for both the organization and the individuals involved. For the employees and customers of Domina Entrega Total, the theft of contact details and passport information significantly increases the risk of identity theft or the occurrence of targeted phishing attacks. Such attacks often leverage the stolen personal information to gain further access to systems or to defraud individuals.

Furthermore, the alleged exposure of corporate agreements and internal correspondence could have a negative impact on the company's business operations. In the context of double-extortion, where the threat of data publication is used as a weapon, the leak of such information can cause substantial damage to the company's reputation. Additionally, the company may face legal processes under Colombian data protection regulations due to the potential exposure of sensitive personal and corporate data.

Regarding the threat actor, public information about the Akira group remains limited. However, they are known to frequently exploit vulnerabilities in VPN accounts to gain initial access to corporate networks. To defend against such threats, organizations in the logistics and BPO sectors typically focus on strengthening their perimeter security, implementing multi-factor authentication, and ensuring that remote access solutions like VPNs are strictly monitored and updated.