Casting House allegedly targeted by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Manufacturing
• Announcement date: November 28, 2025

Akira ransomware group claims data breach at Casting House

The Akira ransomware group has listed the manufacturing company Casting House on their dedicated leak site. According to the announcement made on November 28, 2025, the threat actors claim to have successfully exfiltrated corporate data belonging to the organization. This incident follows a period of activity that the group reportedly began in early 2023.

The threat actor claims to have obtained approximately 10 GB of corporate documents from the organization. While the group has provided no screenshots to verify the contents of the stolen data, they have asserted that the breach occurred around September 2, 2025. The Akira group is known for employing double-extortion tactics, a method where attackers not only encrypt an organization's systems but also threaten to publish sensitive information on a leak site to pressure the victim into paying a ransom.

Details of the alleged data theft

The information allegedly stolen by the Akira group is quite diverse, spanning various aspects of the company's internal operations and sensitive information. Based on the claims made by the threat actors, the stolen dataset reportedly includes the following types of information:

• Personal employee data
• Financial records
• Agreements and contracts
• Confidential corporate files
• Credit card details

The group has not provided any specific details regarding the exact number of files taken or the specific amount of a ransom demand. The presence of such sensitive data, particularly financial records and credit card details, highlights the potential impact of the breach on both the company and the individuals involved.

About Casting House

Casting House is a full-service custom jewelry manufacturing company. The organization provides jewelers and designers with access to various manufacturing solutions. By offering a range of production services, the company aims to help its clients grow their inventory and meet specific design requirements through specialized manufacturing processes.

Potential risks and industry implications

This alleged breach carries significant risks for both the organization and its stakeholders. The exposure of personal employee data and credit card details may increase the risk of identity theft and financial fraud for Casting House employees and customers. Furthermore, the use of double-extortion tactics by the Akira group can cause lasting damage to an organization's reputation through the public release of confidential information, potentially creating secondary risks for the entire supply chain.

Given that the organization is located in the United States, it may face various legal obligations under relevant state laws and federal data protection regulations regarding the handling of sensitive information. There is also a possibility that the leaked data could be utilized by threat actors in targeted phishing attacks, especially considering the historical activity patterns of the Akira group.

In such scenarios, organizations often find it necessary to initiate formal data breach notification procedures to inform the affected parties. For companies in the manufacturing and supply chain sectors, maintaining robust security measures—such as securing VPN accounts, which has been a common entry point for the Akira group—is a critical defensive step to mitigate the risk of unauthorized access and subsequent data exfiltration.