Easypak listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: United States
• Sector: Manufacturing
• Announcement date: January 29, 2026

Akira claims data breach at Easypak

The Akira ransomware group has officially listed the United States-based organization Easypak on its dedicated leak site. According to the announcement made by the threat actors, the group claims to have successfully exfiltrated a significant amount of corporate information, totaling approximately 70 GB of data. This development follows a pattern of double extortion frequently utilized by modern ransomware groups, where stolen data is used as leverage to pressure victims into paying ransoms.

The threat actor created this data leak announcement on January 29, 2026. According to the claims made by the group, the initial incident that allowed them to obtain the corporate data is said to have occurred on January 13, 2026. While the group has announced their intent to publish the stolen data in the near future, they have not provided a specific timeline for the release. It is important to note that no screenshot of the stolen data was provided in the listing to verify the claims.

The alleged stolen data

The information provided in the leak site listing details a variety of sensitive corporate and personal files that have reportedly been compromised. The group claims that the stolen data includes highly sensitive information that could pose significant risks to both the company and the individuals involved. The specific types of data mentioned in the claim include:

• Social Security Numbers (SSNs) of 30 employees
• Customer Social Security Numbers (SSNs)
• Contracts
• Financial documents
• Non-Disclosure Agreements (NDAs)
• Other confidential files

The inclusion of Social Security Numbers for both employees and customers suggests a high level of sensitivity regarding the breach, as such information is a primary target for identity theft and fraudulent activities.

About Easypak

Easypak is a manufacturer that provides thermoformed packaging solutions for a variety of sectors. The company specializes in providing high-performance plastic packaging products for food, consumer goods, medical, and industrial applications. Their role in the supply chain for these diverse industries makes the security of their corporate data critical to their operational integrity.

Analysis and potential impact

This incident suggests that both the employees and the customers of Easypak may face significant risks related to identity theft due to the alleged exposure of Social Security Numbers. Furthermore, the alleged exposure of financial documents and contracts could create secondary risks for the company's ongoing business operations and professional relationships.

Because the entity is based in the United States, this incident may trigger specific legal obligations. Depending on the nature of the data and the jurisdictions involved, data breach notification obligations under relevant state laws and federal regulations may arise for the organization. The use of the double extortion method by the Akira group—whereby data is both encrypted and stolen—is designed to maximize reputational damage and facilitate targeted phishing attacks if the data is eventually published.

While public information regarding the Akira group remains limited, reports indicate that they frequently exploit vulnerabilities in VPNs to gain access during similar attacks. This highlights the ongoing importance of securing remote access points. For organizations in the manufacturing sector, maintaining robust security posture through regular patching, multi-factor authentication, and strict access controls is a vital defensive step to mitigate the risk of such intrusions.