CreateASoft targeted by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Technology
• Announcement date: September 8, 2026

Akira ransomware group claims breach of CreateASoft

The Akira ransomware group has listed the technology company CreateASoft on its dedicated leak site. According to the announcement made on September 8, 2026, the threat actors claim to have successfully compromised the organization's operational data. The group has indicated that the stolen corporate data is intended for publication in the near future.

Details of the alleged data theft

While the group has posted the organization on its leak site, no screenshots were provided to verify the contents of the breach. The announcement alleges that a significant variety of sensitive information has been compromised during the attack. The specific types of data claimed to be involved include:

• Employee data
• Customer data
• Contact information
• Agreements
• Financial records
• Project documents

The claim suggests that the breach encompasses a wide range of internal and external-facing documentation, potentially impacting various levels of the organization's operations.

About CreateASoft

CreateASoft is a technology company that specializes in the development of digital twin, artificial intelligence, and simulation software. These tools are designed to enhance operational efficiency across various sectors. The company provides specialized process improvement solutions for several industries, including manufacturing, warehousing, and healthcare.

Risk assessment and implications

This alleged breach carries several significant risks for the organization and its stakeholders. For CreateASoft employees and customers, the exposure of personal and contact information may increase the risk of identity theft or the occurrence of targeted phishing attacks. Furthermore, the potential exposure of corporate and financial data could result in a loss of commercial reputation and a decrease in the company's competitive advantage.

The Akira group is known for employing double-extortion tactics. This method typically involves both encrypting an organization's systems and threatening to leak sensitive data to pressure the victim into paying a ransom. Given this tactic, the publication of the claimed data could lead to legal sanctions under data protection regulations, such as the GDPR. Additionally, there is a possibility that other stakeholders within the supply chain could be indirectly placed at risk by this incident.

In the technology sector, maintaining the integrity of simulation and AI software development processes is critical. Organizations in this space often face complex supply chain risks where a breach in one company can impact many others. While information regarding this specific group remains limited, such incidents highlight the ongoing necessity for robust defensive measures. Organizations typically focus on implementing strong access controls, continuous monitoring, and comprehensive data protection strategies to mitigate the impact of such threats.