Custom Engineered Wheels targeted by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Manufacturing
• Announcement date: December 3, 2025

The Akira ransomware group has listed a significant amount of data allegedly belonging to Custom Engineered Wheels on its dedicated leak site. According to the announcement made by the threat actor, the stolen dataset is claimed to be approximately 65 GB in size.

The alleged attack details

On December 3, 2025, the Akira group announced that it had successfully compromised data belonging to the US-based organization Custom Engineered Wheels. The group claims to be in possession of 65 GB of corporate data, which they have stated they intend to publish.

The announcement specifies that the stolen information includes a variety of sensitive materials, such as employee details, financial records, and client agreements. This type of claim is characteristic of modern ransomware operations, where attackers focus on data exfiltration to increase their leverage during negotiations.

The scope of the claimed data breach

While the group has not provided any screenshots to verify the contents of the stolen files, the alleged data breach involves several sensitive categories of information. The contents reportedly include highly personal and corporate-sensitive documentation.

The specific types of data mentioned in the claim include:

• Employee personal data (such as dates of birth, phone numbers, and addresses)
• Financial records
• Client information
• Non-disclosure agreements (NDAs)
• Scanned documents

The presence of such diverse data types suggests a broad compromise of the organization's internal systems and documentation repositories.

About Custom Engineered Wheels

Custom Engineered Wheels (CEW Inc.) is a company based in the United States that specializes in advanced injection molding solutions. Their manufacturing processes are focused on the production of polyurethane foam products.

The company provides a wide range of components for various industries. Their product portfolio includes industrial wheels, medical mobility solutions, and specialized parts intended for bicycles and recreational vehicles.

Potential risks and organizational implications

This alleged breach by the Akira group may pose a significant risk of identity theft for the company's employees and clients due to the exposure of personal identifiers. Furthermore, the exposure of financial records and legal contracts could lead to secondary risks regarding the organization's commercial operations and business relationships.

Because the organization is located in the United States, the incident may trigger data breach notification requirements under relevant state laws and federal regulations. The group appears to be utilizing double-extortion tactics, a method where attackers not only encrypt systems but also threaten to leak sensitive data to pressure the victim into paying a ransom.

The publication of this data could lead to lasting reputational damage and make the organization a target for subsequent phishing attacks. In the manufacturing sector, such incidents highlight the importance of robust data protection strategies. Organizations in this sector often prioritize securing intellectual property and supply chain information to prevent similar outcomes. Common defensive measures typically include implementing strict access controls, maintaining offline backups, and conducting regular security audits to mitigate the impact of such threats.