Don’s MobileGlass listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: United States
• Sector: Professional Services
• Announcement date: November 14, 2024

The Akira ransomware group has published data allegedly belonging to Don’s MobileGlass on their dedicated leak site. The threat actors claim to have successfully targeted the organization, making sensitive files available to the public via a torrent link. This development marks the latest incident involving the Akira group, a known entity in the ransomware landscape.

Details of the alleged attack

On November 14, 2024, the Akira group officially listed Don’s MobileGlass on their leak site. According to the claims made by the threat actors, the breach occurred on the same day, November 14, 2024. The group asserts that they have made various files available for download through a torrent link. Notably, the attackers stated that the archives containing the alleged stolen information do not contain any password protection, making the files accessible to anyone who downloads them.

Ransomware attacks of this nature often follow a pattern where attackers gain access to a network and exfiltrate sensitive information before deploying encryption. The use of a leak site is a hallmark of modern cybercrime, serving as a platform for the attackers to exert pressure on the victim. In this instance, the group has moved from the initial intrusion to the public disclosure phase, claiming the data is now available for widespread distribution.

The content of the leaked data

While no screenshots have been provided to verify the contents of the leak, the Akira group claims that the stolen data includes several categories of sensitive information. The alleged breach involves the following types of data:

• Accounting records
• Human resources data
• Technical drawings

The specific volume of the data, the exact file count, and the specific ransom demand associated with this incident have not been disclosed by the group. Information regarding the total size of the data breach remains unknown at this time.

About Don’s MobileGlass

Don’s Mobile Glass is a glass company that provides glass replacement, repair, and installation services for automotive, residential, and commercial sectors. The company offers on-site glass solutions through its mobile service capabilities. Operating within the professional services sector in the United States, the organization provides specialized mobile services to meet the needs of various clients across different industries.

Implications and organizational risks

This leak may compromise the privacy of employees and the financial processes of Don’s MobileGlass. The allegedly leaked data could potentially be used for identity theft or targeted phishing attacks against the organization. Because the company operates in the United States, the incident may trigger legal processes under relevant state laws and data protection regulations. The double extortion method employed by the Akira group—whereby attackers both encrypt data and threaten to leak it—may lead to significant reputational damage and operational risks following the publication of the data.

In general, when organizations face such threats, the exposure of human resources and accounting data can lead to long-term consequences. Identity theft risks for employees can lead to legal liabilities, while the loss of technical drawings can impact proprietary business processes. For companies in the professional services sector, maintaining robust defensive postures is critical. This typically includes implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training to prevent phishing-based entries. Furthermore, monitoring for unauthorized data exfiltration and ensuring strict access controls can help mitigate the impact of such incidents. Information regarding the Akira group remains limited, making it difficult to determine the full scope of their operational capabilities.