DI.C.S.EL. S.R.L. targeted by Akira ransomware group

• Ransomware group: Akira
• Country: Italy
• Sector: Manufacturing
• Announcement date: September 22, 2026

Akira ransomware group claims breach of DI.C.S.EL. S.R.L.

The Akira ransomware group has officially listed the Italian company DI.C.S.EL. S.R.L. on its dedicated leak site. According to the announcement made on September 22, 2026, the threat actor group claims to have successfully compromised the organization's network and intends to publish stolen information.

The group has announced that it will soon release approximately 9 GB of corporate data belonging to the company. While the specific details regarding the ransom demand have not been disclosed, the threat actor has moved to list the victim on their public platform. Information regarding the Akira group remains limited; however, the group is known to typically employ double-extortion tactics. This method involves both encrypting a victim's systems and stealing sensitive data to use as leverage during negotiations. Furthermore, reports indicate that this group commonly targets both Windows and Linux environments during their operations.

Details of the alleged data exposure

The information provided in the group's post suggests that the breach involves a significant variety of sensitive files. The data allegedly stolen includes a range of personal, financial, and corporate documents. No screenshots were provided by the group to verify the contents of the stolen files.

The following types of data are reportedly included in the breach:

• Employee personal data
• Driver's licenses
• EU ID cards
• Financial records
• Payment details
• Project files
• Non-disclosure agreements

About DI.C.S.EL. S.R.L.

DI.C.S.EL. S.R.L. is an Italian company headquartered in Milan. Founded in 2005, the organization specializes in providing technical solutions specifically for the electrical and measurement sectors.

Potential impact and security implications

This alleged breach presents several significant risks to the organization and its stakeholders. For the employees of DI.C.S.EL. S.R.L., the exposure of personal identifiers such as driver's licenses and EU ID cards creates a heightened risk of identity theft. Such information is highly valuable to malicious actors for fraudulent activities.

From a corporate perspective, the exposure of financial and commercial data could lead to a loss of competitive advantage. Additionally, the leak of project files and non-disclosure agreements (NDAs) could result in potential breaches of legal agreements with third parties. Because the company is based in Italy, this incident may be subject to investigation by data protection authorities under the General Data Protection Regulation (GDPR).

The use of double-extortion tactics by the Akira group is designed to maximize pressure on the organization to pay a ransom by threatening the public release of sensitive information. There is also a risk that the leaked data could be utilized in secondary attacks against the company or its partners. In such scenarios, organizations often focus on strengthening their defensive posture through measures such as implementing multi-factor authentication, maintaining offline backups, and conducting regular security awareness training to mitigate the impact of such incidents.