Beasley & Gilkison data allegedly leaked by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Professional Services
• Announcement date: February 10, 2026

Akira ransomware group claims breach of Beasley & Gilkison

The Akira ransomware group has claimed responsibility for a data breach involving the law firm Beasley & Gilkison. According to an announcement made on the group's leak site on February 10, 2026, the threat actors allege they have successfully compromised the firm's network and exfiltrated a significant volume of sensitive information.

The claim suggests that the security incident may have occurred as early as January 21, 2025. The threat actor asserts that they gained unauthorized access to the firm's internal systems, allowing them to access and potentially compromise various corporate documents. The group has listed over 32 GB of data on their leak site, claiming the contents belong to the legal practice.

Details of the alleged data leak

While the group has not provided any screenshots to verify the contents of the stolen files, the claim specifies that the leaked data includes a wide variety of sensitive documents. The alleged breach involves highly personal and professional information that could impact multiple stakeholders. The data reportedly includes financial records, such as audit reports, payment details, and invoices, as well as various forms of identity and contact information.

The specific categories of data mentioned in the claim include:

• Financial data
• Employee information
• Customer information
• Medical information
• Identity information

The list of compromised information is extensive, reportedly encompassing non-disclosure agreements (NDAs), emails, phone numbers, and even sensitive medical information. This breadth of data suggests a deep intrusion into the firm's digital environment.

About Beasley & Gilkison

Beasley & Gilkison LLP is a professional legal services firm that has been operating in East Central Indiana since the 1890s. Based in Muncie, the firm provides a wide range of professional legal services to a diverse clientele, including individuals, businesses, and various institutions.

Potential impact and security implications

The alleged leak of such sensitive information carries significant risks. The inclusion of medical and financial details in the leaked data could lead to legal consequences for the firm under US state laws and regulations, such as HIPAA. Furthermore, the exposure of these files increases the risk of identity theft and fraud for both the firm's employees and its clients.

This incident highlights the risks associated with double-extortion tactics, a common method used by ransomware groups. In these scenarios, attackers not only encrypt a victim's data but also steal it, threatening to publish it on a leak site to pressure the organization into paying a ransom. Such tactics can cause lasting damage to a firm's reputation and provide a foundation for highly targeted phishing attacks against the individuals whose data was stolen.

While public information regarding the Akira group remains limited, similar attacks have frequently been reported to utilize vulnerabilities in VPNs as an initial entry vector. For organizations in the professional services sector, maintaining robust security postures is critical. This includes implementing multi-factor authentication, ensuring all remote access tools like VPNs are fully patched and secured, and maintaining strict monitoring of network traffic to detect unauthorized access or large-scale data exfiltration early in the attack lifecycle.