Fickling & Company listed by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Professional Services
• Announcement date: March 10, 2025

Akira ransomware group claims data breach at Fickling & Company

The Akira ransomware group has listed Fickling & Company on its leak site, claiming to possess a significant volume of stolen information. According to the announcement made on March 10, 2025, the threat actor group alleges they have obtained over 70 GB of data belonging to the organization.

Details of the alleged attack

On March 10, 2025, the Akira group posted a listing for Fickling & Company on its dedicated leak site. The group claims to have successfully exfiltrated a dataset exceeding 70 GB in size. The group alleges that the stolen information includes essential corporate and personal documents. While specific details regarding the group's methods are limited, it is known that Akira has been operating as a double-extortion Ransomware-as-a-Service (RaaS) entity since early 2023. This specific threat actor is frequently noted for targeting VPN credentials to gain initial access to corporate networks.

Double-extortion is a common tactic used by modern ransomware groups. In this model, the attackers do not just encrypt a victim's files to disrupt operations; they also steal sensitive data before the encryption process begins. This allows them to pressure the organization with the threat of leaking the stolen information publicly if the ransom is not paid, creating a secondary layer of leverage beyond mere operational downtime.

Potential types of compromised data

According to the announcement, the leaked data may include a variety of sensitive documents and personal identifiers. While no screenshot has been provided to verify the contents of the leak, the group claims the following information may be involved:

• Corporate NDAs
• Personal Social Security Numbers (SSNs)
• Credit card details with CVV numbers
• Licenses
• Agreements
• Passport scans
• Health certificates
• Contact information for employees and customers

About Fickling & Company

Fickling & Company is a regional real estate services and development firm based in Georgia. The company operates in commercial and residential real estate management, brokerage, and development projects.

Risk assessment and implications

The alleged leak may increase the risk of identity theft and financial fraud for the company's employees and customers. The exposure of Social Security Numbers and passport scans could pose long-term security threats to the affected individuals, as these identifiers are often used to facilitate identity fraud.

Because the company is based in the United States, the data breach notification requirements under relevant state laws and federal regulations may be triggered. The nature of the data involved suggests that the company may need to initiate notification and protection processes for the affected parties. Furthermore, the double-extortion method used by the Akira group may lead to an increase in secondary attacks and targeted phishing attempts following the publication of the data.

Organizations in the professional services sector often face significant risks when sensitive client and employee information is exposed. To defend against such threats, companies typically implement robust security measures, such as multi-factor authentication (MFA) to protect against the use of stolen VPN credentials, regular security awareness training to prevent phishing, and comprehensive data encryption to protect sensitive information both at rest and in transit. Additionally, maintaining a rigorous patch management program helps close vulnerabilities that threat actors often exploit for initial access.