Fuji Seal International (US branch) targeted by Akira ransomware

• Ransomware group: Akira
• Country: United States
• Sector: Manufacturing
• Announcement date: September 18, 2023

Akira ransomware group claims data leak against Fuji Seal International (US branch)

The Akira ransomware group has announced a data leak involving the United States branch of Fuji Seal International. According to the group's announcement, which was made on September 18, 2023, they claim to have exfiltrated a significant amount of data from the organization's networks. The group asserts that the total volume of the stolen data is approximately 30 GB.

This incident follows a pattern of behavior often seen in modern cyberattacks where threat actors target specific corporate branches to maximize impact. The claim suggests that the group has successfully breached the perimeter of the organization's digital infrastructure, leading to the potential exposure of sensitive information.

Details of the alleged attack and group claims

The Akira group claims to have gained unauthorized access to the networks belonging to the US branch of Fuji Seal International. In their announcement, the threat actors stated that the management of the organization has refused to engage in negotiations regarding the incident. As a result of this refusal, the group indicated its intention to publish a dataset containing the stolen information.

The announcement was officially posted on a leak site on September 18, 2023. While the group has claimed the attack occurred on the same date, they have not provided specific details regarding the method of entry or the duration of their presence within the network. No screenshots or visual evidence of the breach were provided in the announcement to verify the claims.

The nature of the allegedly stolen data

The information allegedly stolen by the Akira group is described as being highly sensitive. The group claims that the 30 GB dataset consists of various documents that are not intended for public consumption. Based on the group's claims, the leaked information includes:

• Confidential documents
• Contracts
• Agreements

The presence of such documents in a leak suggests a high potential for misuse. In many ransomware scenarios, the theft of contracts and legal agreements can provide attackers with leverage during extortion attempts, as these documents often contain sensitive business terms and obligations.

About Fuji Seal International

Fuji Seal International is a global packaging solutions company. The organization specializes in a variety of products, including shrink sleeve labels, self-adhesive labels, spouted pouches, and label-application systems. The company is known for developing innovative packaging technologies that serve multiple industries, such as food, beverage, and personal care.

Potential impact and organizational risks

This alleged leak may lead to the exposure of the organization's trade secrets and operational data. Depending on the specific content of the data, the incident could trigger legal processes under US state laws and relevant data protection regulations. The exposure of confidential agreements and contracts can have long-term implications for business relationships and regulatory compliance.

Furthermore, the leaked information could be utilized for targeted phishing attacks against employees or business partners. When attackers possess internal documents, they can craft highly convincing social engineering campaigns that appear legitimate to unsuspecting recipients. This secondary risk is a hallmark of the double-extortion method employed by groups like Akira, where the threat of leaking data is used to pressure the victim even if they can restore systems from backups.

Given the Akira group's methodology, the organization may face risks of secondary extortion or further data exposure. Because information about this specific group remains limited, the full scope of their capabilities and long-term objectives remains difficult to assess. Organizations in the manufacturing and packaging sectors often face similar risks and may consider defensive steps such as implementing strict access controls, enhancing network monitoring, and conducting regular security awareness training to mitigate the impact of such threats.