Delignit data allegedly leaked by Akira ransomware group

• Ransomware group: Akira
• Country: Germany
• Sector: Manufacturing
• Announcement date: May 23, 2025

Akira ransomware group claims to have leaked Delignit data

The Akira ransomware group has listed approximately 24 GB of corporate data on its leak site, which the group alleges belongs to the German company Delignit AG. According to the announcement made on May 23, 2025, the threat actor claims the incident occurred on the same day, involving the exfiltration of various documents. The Akira group is a known double-extortion ransomware operator that has been active in the cyber threat landscape since early 2023.

Double-extortion is a tactic where threat actors not only encrypt an organization's systems to disrupt operations but also steal sensitive data before encryption. The attackers then threaten to release this stolen information on public leak sites if the ransom is not paid. This method is designed to increase the pressure on an organization, as the threat of a public data leak can cause significant reputational and legal damage, even if the company has robust backups to restore its systems.

Details of the alleged data exfiltration

While the announcement was made on the group's leak site, it is important to note that no screenshots were provided with the listing. Consequently, the actual content and authenticity of the leaked data cannot be verified at this time. The group claims that the stolen information includes a variety of sensitive materials, such as financial records and documents belonging to third-party partners.

The specific types of data mentioned in the claim include:

• Employee personal data
• Contracts
• Client information (including Mercedes Benz files)
• Financial data

The inclusion of files belonging to major partners like Mercedes Benz highlights a significant concern regarding supply chain security. When a manufacturer is compromised, the data of their business partners may also be exposed, potentially creating a ripple effect of risk throughout the industry.

About Delignit AG

Delignit AG is a company based in Germany that specializes in the development, manufacture, and sale of ecological materials and system solutions. These products are derived from renewable natural resources. The company focuses specifically on wood-based products and serves both the industrial and automotive sectors.

Potential implications and risks

The nature of the data allegedly leaked in this incident may pose significant secondary risks to the organization, its employees, and its clients. For employees and customers, the exposure of personal documents and contact information can lead to identity theft or the execution of targeted phishing attacks. Such attacks often use stolen information to appear legitimate, making it harder for individuals to detect fraudulent communications.

Furthermore, because the organization is based in Germany, this breach could lead to serious legal consequences. Under the European Union's General Data Protection Regulation (GDPR), companies are required to protect personal data, and failures in data security can result in administrative fines and legal sanctions. The exposure of sensitive client information also carries heavy implications for corporate reputation and trust.

In sectors like manufacturing, where supply chains are highly interconnected, such incidents underscore the importance of comprehensive cybersecurity frameworks. Organizations often implement defensive measures such as multi-factor authentication, regular security audits, and strict access controls to mitigate these risks. Protecting the integrity of the supply chain is vital to prevent a single breach from impacting multiple high-profile partners and maintaining the security of the broader industrial ecosystem.