Erdy McHenry Architecture listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: United States
• Sector: Professional Services
• Announcement date: August 14, 2025

Akira ransomware group claims data breach at Erdy McHenry Architecture

The Akira ransomware group has listed data allegedly belonging to Erdy McHenry Architecture on its leak site. According to the announcement, the threat actor claims to have compromised a significant volume of information, specifically citing a dataset of 26 GB.

Details of the alleged attack

The Akira group published an announcement on August 14, 2025, claiming to have compromised data belonging to Erdy McHenry Architecture. The group alleges that it possesses a 26 GB dataset containing corporate and financial documents. While public information regarding the specific operations and technical nuances of this group remains limited, it is reported to employ double-extortion tactics. This method typically involves both encrypting an organization's systems and threatening to leak sensitive data to pressure the victim into paying a ransom.

Furthermore, it is reported that the group often gains initial access to target systems by exploiting vulnerabilities in VPN accounts. This highlights a common trend in modern cyberattacks where remote access tools become primary entry points for threat actors seeking to penetrate corporate networks.

Scope of the alleged data leak

The leak is said to contain various types of sensitive information. While no screenshot has been provided to verify the contents, the group claims the following data types are involved:

• Financial data (payment details, invoices)
• Employee information
• Personal files
• Customer data

About Erdy McHenry Architecture

Erdy McHenry Architecture is an architecture firm providing a diverse range of services including academic, cultural, commercial, residential, and health science projects. The firm is based in Philadelphia, Pennsylvania.

Analysis and potential impact

The alleged data leak may increase the risk of identity theft or targeted phishing attacks for the organization's employees and customers. The exposure of financial information could potentially harm the organization's business operations and reputation. Because the organization is based in the United States, data breach notification obligations under relevant state laws and federal regulations may arise.

The use of the Akira group's double-extortion method may be intended to increase pressure on the organization to pay a ransom. In such scenarios, organizations often face the difficult choice of negotiating with attackers or attempting to recover from backups while managing the threat of public data exposure. To mitigate such risks, organizations in the professional services sector often need to review their data security processes and notify affected parties to maintain transparency and compliance.