Design Electric targeted by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Manufacturing
• Announcement date: October 9, 2026

Akira ransomware group claims data breach at Design Electric

The Akira ransomware group has listed data allegedly belonging to Design Electric on their leak site. According to the announcement made on October 9, 2026, the group claims to have compromised a total volume of 15 GB of data from the organization.

The incident was announced on the group's dedicated leak site, where the threat actors claim to have successfully infiltrated the company's systems. While the group has published an announcement regarding the breach, no screenshots were provided to verify the contents of the stolen information. The group has indicated that the alleged data will be uploaded in the near future.

Details of the alleged data theft

The announcement provided by the Akira group outlines a significant amount of sensitive information that has allegedly been exfiltrated from Design Electric. The breach involves a variety of personal and corporate data types that could pose significant risks to the affected parties. The information claimed to be part of the leak includes:

• Employee passport information
• Driver's licenses
• Social Security Numbers (SSN)
• Contact information
• Project data
• Client information
• Non-disclosure agreements

The exposure of such specific personal identifiers, particularly Social Security Numbers and government-issued identification like passports and driver's licenses, presents a high risk for identity theft. Furthermore, the inclusion of non-disclosure agreements and project details suggests that the breach may extend into the company's proprietary and legal documentation.

About Design Electric

Design Electric is a company based in St. Cloud, Minnesota. The organization provides specialized electrical services across several critical sectors, including the industrial, government, and transportation sectors. Given its involvement in these infrastructure-adjacent industries, the company plays a role in supporting essential services and large-scale projects.

Impact and security implications

The alleged data leak poses several layers of risk. First, the exposure of sensitive employee personal information, such as passports and Social Security Numbers, creates a direct risk of identity theft for the individuals involved. Because the company operates within the United States, this incident may trigger specific legal obligations. The organization may face data breach notification requirements under relevant state laws and federal regulations due to the nature of the exposed sensitive information.

The Akira group is known for employing a double-extortion method. In such attacks, threat actors not only encrypt a victim's systems to disrupt operations but also steal sensitive data to use as leverage. This data can be used in secondary attacks or highly targeted phishing campaigns against the company, its employees, or its clients. The publication of client information and specific project details could also lead to significant negative impacts on the company's corporate reputation and may pose risks to supply chain security.

For organizations operating in the manufacturing and industrial services sectors, maintaining robust cybersecurity postures is essential. Common defensive steps include implementing multi-factor authentication (MFA) across all remote access points, maintaining offline backups of critical data, and conducting regular employee training to recognize phishing attempts. Additionally, monitoring for unauthorized data exfiltration and ensuring strict access controls for sensitive documents like NDAs and project files can help mitigate the impact of such incidents. Public information regarding the Akira group remains limited.