DigiCOURSE listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: United States
• Sector: Manufacturing
• Announcement date: January 16, 2026

Akira ransomware group claims breach of DigiCOURSE

The Akira ransomware group has officially listed the United States-based organization DigiCOURSE on its dedicated leak site. The announcement, made on January 16, 2026, constitutes an allegation of a successful data breach against the company. According to the threat actor, unauthorized access to the organization's network has been achieved, and the group has stated their intention to upload corporate data in the near future.

Ransomware leak sites serve as a platform for cybercriminal groups to pressure victims into paying ransoms. In these scenarios, the threat actors typically employ a method known as double extortion. This technique involves not only encrypting an organization's internal systems to disrupt operations but also exfiltrating sensitive data. The threat actors then threaten to publish this stolen information on public forums if the ransom demands are not met, thereby increasing the pressure on the victim through the threat of reputational damage and legal repercussions.

Details of the alleged data theft

While the announcement provided no screenshots to verify the claims, the Akira group has specified the types of sensitive information they allege to have compromised. The threat actor claims to have access to a variety of documents that could pose significant risks to both the organization and the individuals involved. The specific categories of data mentioned in the claim include:

• Employee passport information
• Employee identification documents
• Client information
• Financial records
• Non-disclosure agreements

The absence of specific details regarding the total volume of data or the exact number of files compromised means the full scale of the potential leak remains unknown at this time. No ransom demand has been publicly disclosed by the group in relation to this specific listing.

About DigiCOURSE

DigiCOURSE is a global industry leader specializing in command and control positioning systems for offshore oil and gas exploration. The company provides various services including engineering, customized manufacturing, and non-magnetic calibration. Given its role in the manufacturing sector and its specialized services for the energy industry, the organization maintains critical technical and administrative data essential for its global operations.

Potential impact and security implications

The claims made by the Akira group suggest several critical risks. For the organization, the alleged compromise of financial records and non-disclosure agreements (NDAs) could create negative impacts on its commercial operations. Furthermore, if the stolen data is published, the organization may face legal consequences under the General Data Protection Regulation (GDPR) or relevant United States state laws. Such regulatory scrutiny often follows the exposure of sensitive personal and corporate information.

For individuals, the exposure of employee passports and identification documents presents a high risk of identity theft. Additionally, the leaked information could be utilized by threat actors for secondary attacks or targeted phishing campaigns, where attackers use stolen details to gain further trust during social engineering attempts.

The Akira group is a Ransomware-as-a-Service (RaaS) operation that has been active since early 2023. Public information indicates that the group is known for utilizing vulnerabilities in Virtual Private Networks (VPNs) to conduct their double-extortion attacks. To defend against such threats, organizations in the manufacturing and energy sectors often prioritize securing remote access points, implementing multi-factor authentication, and maintaining rigorous monitoring of network traffic to detect unauthorized access attempts early.