Donjon claims data leak by Akira ransomware group

• Ransomware group: Akira
• Country: Japan
• Sector: Manufacturing
• Announcement date: March 5, 2026

Akira ransomware group claims data breach at Donjon

The Akira ransomware group has claimed responsibility for a data breach targeting Donjon, a manufacturing firm. According to an announcement made on a leak site on March 5, 2026, the threat actor group has listed a significant amount of data allegedly belonging to the organization. This claim follows an alleged attack date of February 23, 2026.

The threat actor has indicated that the stolen information will be published. It is alleged that the compromised files are related to the company's operational and administrative processes. This type of announcement is a common tactic used by ransomware groups to pressure victims into paying a ransom, a method often referred to as double extortion. In such scenarios, attackers not only encrypt the victim's systems but also steal sensitive data, threatening to leak it publicly to increase the pressure on the organization.

Details of the alleged data theft

The Akira ransomware group claims to have exfiltrated 58 GB of data from the organization. While no screenshots were provided to verify the contents of the breach, the group has specified the types of information they claim to have obtained. The alleged data includes a wide range of sensitive documentation that could impact various aspects of the company's operations and legal standing.

The specific types of data mentioned in the claim include:

• Employee personal documents
• HR files
• Technical drawings
• Project documents
• Contracts
• Non-disclosure agreements
• Client documents

The potential publication of these files poses significant secondary risks. For employees and clients, the exposure of personal and HR documents can lead to identity theft or the execution of targeted phishing attacks. For the company itself, the loss of technical drawings, project documents, and contracts could result in a loss of competitive advantage and significant operational disruptions.

About Donjon

Donjon Pte Ltd is a Singapore-based company that has been established since 2003. The firm specializes in mechanical and electrical engineering services. Their professional portfolio includes various technical solutions such as generator supply, renewable energy solutions, facility maintenance, and systems for air-conditioning and mechanical ventilation.

Risk assessment and industry implications

The incident involving Donjon highlights the evolving risks faced by the manufacturing and engineering sectors. The exposure of trade secrets and technical projects is a critical concern for companies in this field, as it can directly impact their market position. Furthermore, such breaches can lead to legal and administrative sanctions under relevant data protection regulations depending on the jurisdiction and the nature of the data exposed.

Regarding the Akira ransomware group, public information remains limited. However, it is known that this group frequently gains access to target networks by exploiting vulnerabilities in Virtual Private Networks (VPNs). This underscores the importance of robust perimeter security and the regular patching of remote access gateways.

For organizations operating in similar sectors, maintaining strong defensive postures is essential. This typically involves implementing multi-factor authentication (MFA), maintaining strict patch management protocols, and conducting regular security audits. Because ransomware groups often use double extortion, companies must prepare for both the recovery of systems and the management of data privacy incidents to mitigate long-term reputational and legal damage.