Engineered Profiles listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: United States
• Sector: Manufacturing
• Announcement date: October 27, 2025

The Akira ransomware group has listed the American manufacturing firm Engineered Profiles on its dedicated leak site. According to the announcement made on October 27, 2025, the threat actor claims to have successfully exfiltrated a significant volume of corporate information from the organization.

The alleged data breach event

The Akira ransomware group alleges that it has obtained 56 GB of corporate data belonging to Engineered Profiles. This incident is being presented by the group as part of their known double-extortion operations. In such scenarios, threat actors typically encrypt an organization's systems to disrupt operations while simultaneously stealing sensitive data to use as leverage during ransom negotiations.

The group claims that the compromised information includes a variety of sensitive corporate documents and employee records. While the group has posted the organization on its leak site, no screenshot has been provided to verify the contents of the alleged breach. The group's claim suggests that the breach occurred around September 11, 2025.

The data allegedly involved in the leak

The information allegedly contained within the leaked data set is extensive, covering both corporate and personal details. According to the claims made by the Akira group, the stolen data includes the following items:

• Employee social security cards
• Driver licenses
• Medical information
• Addresses
• Phone numbers
• Project files
• Customer information
• Accounting records
• Non-disclosure agreements

The exposure of such a diverse range of data types, spanning from highly sensitive personal identifiable information (PII) to proprietary business documents, highlights the breadth of the alleged theft.

About Engineered Profiles

Engineered Profiles is an American company specializing in high-quality plastic extrusion, design, and advanced manufacturing technologies. The company provides custom plastic profile solutions for various industries.

Analysis and potential implications

This alleged data breach may increase the risk of identity theft for the affected employees due to the nature of the stolen personal documents. Furthermore, the organization could face legal consequences under US data protection regulations and state-level notification requirements. Given the Akira group's known double-extortion tactics, the leaked data may be utilized for secondary attacks or targeted phishing campaigns against the company or its stakeholders.

Furthermore, the exposure of customer and project information could potentially impact the organization's commercial reputation. It is important to note that public information regarding the Akira group is limited.

In general, when organizations face such threats, common defensive steps include implementing robust multi-factor authentication, maintaining offline backups, and conducting regular security awareness training. For companies in the manufacturing sector, protecting intellectual property and customer data is critical to maintaining commercial trust. As ransomware groups continue to evolve, the use of double extortion—where data is not just encrypted but also threatened with public release—remains a significant challenge for modern cybersecurity defenses.