Fuller Metric Parts listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: Canada
• Sector: Manufacturing
• Announcement date: April 3, 2025

Akira ransomware group targets Fuller Metric Parts

The Akira ransomware group has announced its intention to leak data allegedly belonging to Fuller Metric Parts. According to a post on the group's leak site announced on April 3, 2025, the threat actors claim to have obtained a significant volume of corporate information. The group asserts that the attack occurred on the same day the announcement was made.

Ransomware attacks often involve a process known as double extortion. In this scenario, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data. The threat of leaking this stolen information on public forums is used as leverage to pressure the victim into paying a ransom. This method increases the pressure on the target, as the breach of confidentiality can lead to long-term reputational and legal consequences even if the systems are successfully restored from backups.

Details of the alleged data breach

The Akira ransomware group claims to have exfiltrated more than 8 GB of corporate documents. While no screenshots have been provided to verify the contents of the stolen data, the group has specified the types of information they allege to have in their possession. The claimed data includes a variety of sensitive administrative and operational files.

The alleged leaked data includes the following items:

• HR documents
• Financial data
• Employee contact information
• Customer contact information
• Internal corporate correspondence

The disclosure of such diverse datasets—ranging from financial audits and payment details to internal communications—suggests a broad access level within the victim's network. When such information is released, it can lead to secondary risks, such as identity theft or targeted phishing attacks directed at the individuals whose information was compromised.

About Fuller Metric Parts

Fuller Metric Parts is a company that has been operating since 1976. The organization specializes in providing an extensive inventory of both metric and inch fasteners. To support its operations, the company maintains multiple warehouse locations, specifically in Surrey and Mississauga within Canada, as well as in Shanghai, China.

Potential impact and security considerations

The alleged data leak poses several significant risks to the organization. Because Fuller Metric Parts operates in Canada, the compromise of sensitive data may result in a breach of data privacy obligations under the Personal Information Protection and Electronic Documents Act (PIPEDA). Furthermore, the disclosure of financial data may create risks for the organization's various supply chain partners.

The impact of such an event can be categorized into operational and reputational risks. The use of double extortion by groups like Akira can disrupt operational continuity and damage the trust established with customers and partners. While public information regarding the Akira group is limited, it is known that they frequently utilize vulnerabilities in Virtual Private Networks (VPNs) to gain initial access to target networks.

To mitigate these risks, organizations in the manufacturing sector often implement defensive strategies such as multi-factor authentication (MFA) on all remote access points, particularly VPNs, to prevent unauthorized entry. Regular patching of software and hardware to address known vulnerabilities is also a critical component of a robust security posture. Additionally, maintaining strict network segmentation can help limit the movement of an attacker once they have gained access, potentially preventing the large-scale exfiltration of data seen in this instance.