Akira ransomware group lists Perry Brothers Oil on leak site

• Ransomware group: Akira
• Country: United States
• Sector: Energy & Utilities
• Announcement date: November 19, 2025

Akira ransomware group claims breach of Perry Brothers Oil

The Akira ransomware group has officially listed Perry Brothers Oil on its dedicated leak site. According to the announcement, the threat actor group claims to have gained unauthorized access to the institution's network. This development follows a claimed attack date of October 7, 2025, with the listing appearing on the leak site on November 19, 2025.

The group has signaled its intent to proceed with a data leak, stating that 20 GB of corporate documents will be uploaded in the near future. While the group has made these claims, no screenshots have been provided to verify the authenticity of the stolen information at this time. The announcement suggests a significant breach involving the institution's internal network and corporate data assets.

Details of the claimed data theft

The Akira ransomware group has specified the types of sensitive information they claim to have exfiltrated from the organization. The data identified in the claim includes a wide range of highly sensitive personal and corporate information. The alleged data set consists of the following categories:

• Passport data
• Driver license information
• Personal contact information
• Credit card records
• Financial records
• Employee and customer data

In addition to the specific categories listed above, the group claims to possess confidentiality agreements, detailed financial and accounting records, contracts, and incident reports. The breadth of this alleged data suggests a deep penetration into the organization's administrative and financial filing systems.

About Perry Brothers Oil

Perry Brothers Oil Company is an automotive service provider. The organization specializes in a variety of automotive maintenance services, including tires, motor oil, and wheel alignment services.

Potential impact and security implications

The claim made by the Akira group carries significant risks for the affected organization and its stakeholders. The exposure of the alleged data, which includes personal identifiers and financial records, may increase the risk of identity theft and fraud for the institution's employees and customers. Furthermore, the leakage of corporate data could result in the loss of trade secrets and lead to breaches of existing third-party agreements.

Because Perry Brothers Oil is a United States-based entity, the institution may face various data breach notification obligations under relevant state laws and federal regulations. The nature of the threat highlights the dangers of the double extortion method frequently employed by ransomware groups. In this tactic, attackers not only encrypt an organization's data but also threaten to publish it publicly to increase pressure for ransom payments. This method can facilitate secondary phishing attacks following the publication of the stolen data, as attackers can use the leaked personal information to craft highly convincing fraudulent messages.

The tactics used by the Akira group, which have historically involved the exploitation of VPN accounts, underscore the necessity for organizations to maintain rigorous network security processes. To defend against such threats, organizations typically focus on securing remote access points, implementing multi-factor authentication, and maintaining robust monitoring of network traffic to detect unauthorized access early.