Akira ransomware group lists Watertech of America, WorldPoint ECC, Mastermedia, Garrett Leather, Guttenberg Industries. on its leak site

• Ransomware group: Akira
• Country: United States
• Sector: Manufacturing
• Announcement date: December 24, 2025

Akira ransomware group claims data breach against five US companies

The Akira ransomware group has issued an announcement on its leak site claiming to have successfully exfiltrated a significant amount of data from five different organizations. According to the group's claims, the breach involves Watertech of America, WorldPoint ECC, Mastermedia, Garrett Leather, and Guttenberg Industries. This announcement, made on December 24, 2025, suggests a targeted operation against multiple entities across various industries.

Details of the alleged attack

According to the claims made by the Akira group, the group has compromised the networks of the five targeted organizations. The group alleges that the attack took place on December 24, 2025, the same day the announcement was published. The group claims to have obtained more than 12 GB of data from these entities.

The affected companies represent a diverse range of business operations. The list of targeted organizations includes companies operating in the industrial water treatment sector, healthcare training, media, leather manufacturing, and plastic injection molding. This variety in sectors indicates that the group's reach extends across multiple specialized industries within the United States.

Alleged data types and contents

While the group has not provided any screenshots to support their claims, the information provided in the announcement specifies the types of data that have allegedly been compromised. The stolen information is said to include a wide array of sensitive corporate and personal records. The alleged compromised data includes:

• Employee personal data
• Client information
• Project files
• Accounting records
• Financial data
• Operational files

The exposure of such diverse data types—ranging from individual employee details to high-level financial and operational documentation—presents a broad spectrum of potential risks for the involved organizations.

Risks and organizational implications

The claims made by the Akira group could pose significant risks for the employees and clients of the affected companies. Specifically, the potential exposure of personal and client information increases the risk of identity theft and fraud. For the organizations themselves, the disclosure of corporate data could lead to the loss of trade secrets and a loss of competitive advantage in their respective markets.

Because these companies are based in the United States, they may face various legal obligations under federal data protection regulations and various state laws. Furthermore, the use of double-extortion tactics by the group—a method where attackers not only encrypt data but also threaten to leak it to pressure victims into paying—means that the publication of this data could facilitate secondary attacks against the victims.

While public information regarding the Akira group remains limited, their known tendency to exploit vulnerabilities in VPNs suggests that organizations should prioritize thorough reviews of their network security protocols. To defend against such threats, organizations often implement multi-factor authentication, conduct regular vulnerability assessments, and maintain strict monitoring of remote access points to mitigate the risk of unauthorized network entry.