Drake Precision Dental Laboratory targeted by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Healthcare
• Announcement date: February 3, 2026

Akira ransomware group claims data breach at Drake Precision Dental Laboratory

The Akira ransomware group has recently listed Drake Precision Dental Laboratory on its dedicated leak site. According to the announcement made by the threat actors, the organization has been targeted in a cyberattack involving the exfiltration of corporate data. The group claims that they have successfully stolen a significant volume of information and has threatened to publish the contents of the breach.

Details of the alleged incident

The announcement was posted on February 3, 2026, with the group claiming the attack occurred on the same day. The threat actors have stated that they intend to publish 39 GB of corporate data belonging to the organization. This public listing on a ransomware leak site is a common tactic used by modern cybercriminal groups to pressure victims into meeting ransom demands. Such sites serve as a platform where attackers showcase their targets to increase the visibility of the breach and maximize the pressure on the affected entity.

The incident suggests that a significant cybersecurity breach may have occurred within the digital infrastructure of Drake Precision Dental Laboratory. While the group has announced its intent to release the data, no specific ransom demand has been made public in the provided information. Furthermore, no screenshots of the stolen data were provided by the attackers to verify their claims.

Sensitive information allegedly exfiltrated

The information provided by the Akira group suggests that the breach involves a wide range of sensitive data types. The stolen information reportedly includes personal details belonging to the organization's workforce, as well as critical business documentation. Based on the group's claims, the following types of data are involved in the breach:

• Employee personal data
• Social Security Numbers (SSN) of over 120 employees
• Financial records
• Non-disclosure agreements (NDAs)
• Contracts
• Customer information

The inclusion of Social Security Numbers for a large number of employees indicates a high level of sensitivity regarding the stolen information.

Potential risks and industry implications

This incident highlights the severe risks associated with double-extortion ransomware tactics. In a double-extortion scenario, attackers not only encrypt an organization's systems but also steal sensitive data, threatening to leak it publicly if a ransom is not paid. This method is designed to cause maximum reputational damage and create significant operational and legal complications for the victim.

For an organization in the healthcare sector, such a breach carries profound implications. The exposure of sensitive employee and customer information can lead to secondary risks, including identity theft and various forms of fraud. Furthermore, because the organization is based in the United States, it may face specific legal obligations under the Health Insurance Portability and Accountability Act (HIPAA) and various relevant state laws, depending on the specific nature and sensitivity of the compromised data.

The severity of this incident is considered high due to the sensitive nature of the data involved and the potential exposure of personal identifiers. Given the known tactics of the Akira group, which often involve the exploitation of VPN accounts to gain initial access, this incident underscores the necessity for organizations to maintain rigorous network security. To defend against such threats, organizations typically implement comprehensive security reviews, enhance multi-factor authentication, and strengthen their monitoring of remote access points to detect unauthorized activity before data exfiltration can occur.