Dan Eckman CPA data allegedly leaked by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Financial Services
• Announcement date: February 13, 2025

Data allegedly leaked by Akira ransomware group

The Akira ransomware group has reportedly published approximately 10 GB of data that they claim belongs to Dan Eckman CPA on their dedicated leak site. This announcement was listed on February 13, 2025, with the group alleging that the breach occurred around Christmas Day, specifically on December 25, 2024. According to the group's claims, the leaked files are unencrypted, and they have provided a torrent-based method for downloading the stolen information.

Ransomware leak sites serve as a platform for cybercriminal groups to exert pressure on their victims. In a typical double-extortion scenario, attackers do not merely encrypt an organization's systems to halt operations; they also exfiltrate sensitive data. If the ransom is not paid, the group threatens to release this data publicly to maximize leverage. This method creates a secondary layer of risk for the victim, as the exposure of sensitive information can lead to long-term consequences even if the technical systems are restored.

While the group has published the data, no screenshots were provided to verify the contents of the leak. The announcement remains a claim made by the threat actor group regarding the integrity and ownership of the files.

Claimed data contents

The Akira group claims that the stolen data includes a wide variety of sensitive documents and information. The leaked content is said to encompass both corporate and personal details, which could have significant implications for the affected parties. The specific types of data mentioned in the claim include:

• Financial data (audits, payment details, reports)
• Employee contact information
• Customer contact information
• Internal agreements
• Corporate correspondence

The disclosure of such a diverse range of information—spanning from financial reports to private correspondence—highlights the potential impact of data exfiltration in the professional services sector.

About Dan Eckman CPA

Dan Eckman CPA is an accounting firm that provides personal tax services along with a suite of small business accounting solutions. Their professional offerings include bookkeeping, tax planning, preparation, and financial reporting services.

Risk assessment and industry implications

The allegedly leaked data may increase the risk of identity theft and targeted phishing attacks for the firm's clients and employees. When contact information and financial details are exposed, individuals become prime targets for social engineering attacks, where criminals pose as legitimate entities to steal further credentials or funds.

Furthermore, the disclosure of financial data could negatively impact the firm's commercial reputation and may trigger legal proceedings under relevant US state laws and data protection regulations. The double-extortion method employed by the Akira group introduces secondary risks alongside the publication of the data. It is possible that vulnerabilities in the firm's VPN or similar access points may have been exploited to gain entry to the network.

For organizations operating within the financial services sector, such incidents underscore the importance of robust perimeter security and continuous monitoring. Protecting access points like VPNs is a critical defensive step to prevent unauthorized entry. Additionally, these types of leaks may pose risks to supply chain security and could lead to a long-term loss of trust among the firm's clients. Maintaining strong data encryption and implementing strict access controls are standard industry practices used to mitigate the impact of potential breaches.