Aluf Plastics targeted by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Manufacturing
• Announcement date: September 12, 2025

Akira ransomware group claims data breach at Aluf Plastics

The Akira ransomware group has announced a data breach involving Aluf Plastics, claiming to have exfiltrated a significant amount of corporate information. According to a post published on the group's leak site on September 12, 2025, the threat actors claim to have compromised data belonging to the organization. The group asserts that the breach occurred around August 15, 2025, and they are currently threatening to leak a dataset they claim is approximately 40 GB in size.

The Akira group is a known Ransomware-as-a-Service (RaaS) entity that has been active since early 2023. This group is recognized for utilizing double extortion tactics, a method where attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive data to threaten its public release. This dual-layered approach is designed to maximize pressure on the victim organization, forcing them to choose between paying to restore their systems or paying to prevent the exposure of confidential information.

Details of the alleged data leak

The threat actors claim that the stolen dataset contains a wide variety of sensitive information. According to the group's announcement, the 40 GB of data allegedly includes both corporate production and operational documents alongside highly sensitive employee information. While the group has made these claims, they have not provided any screenshots to verify the contents of the stolen data.

The specific types of data the group claims to have in their possession include:

• Employee personal data
• Passport information
• Medical records
• Credit card information
• Financial records
• Customer information

The presence of such diverse data types—ranging from personal identification and medical history to financial and customer records—suggests a comprehensive breach of the organization's internal databases and file servers.

About Aluf Plastics

Aluf Plastics is a manufacturer and distributor specializing in high-quality plastic products. The company's product line includes items such as trash bags, can liners, sheeting, and various types of poly bags. Based in New York, the organization provides a range of industrial and commercial plastic packaging solutions to its clients.

Impact and security implications

The alleged leak of this data carries significant risks for both the organization and the individuals involved. For the employees and customers of Aluf Plastics, the exposure of passport numbers, medical records, and credit card information significantly increases the risk of identity theft and financial fraud. For the company itself, the breach of financial and accounting files, as well as non-disclosure agreements (NDAs) and confidentiality agreements, poses a threat to its operational integrity and business relationships.

Because Aluf Plastics is located in the United States, the nature of the exposed data may trigger specific legal obligations. Depending on the exact contents and the specific state or federal regulations, the company may be required to follow formal notification procedures regarding the breach. Furthermore, the leak of client and customer information can lead to long-term damage to business trust and potential supply chain security risks.

From a technical perspective, the Akira group is known to exploit VPN accounts to gain initial access to networks. This suggests that the organization's cybersecurity infrastructure may contain vulnerabilities that could be exploited for secondary attacks. When organizations face such threats, common defensive measures often include implementing multi-factor authentication (MFA), strengthening VPN security, and maintaining rigorous monitoring of network traffic to detect unauthorized access or large-scale data transfers.