Great Lakes Carpet & Tile listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: August 1, 2025

Akira ransomware group claims data breach at Great Lakes Carpet & Tile

The Akira ransomware group has listed Great Lakes Carpet & Tile on its dedicated leak site, claiming to be in possession of significant amounts of corporate data. This announcement, posted on August 1, 2025, follows an alleged attack date of May 14, 2025. The threat actors claim to have exfiltrated a substantial volume of information, potentially impacting the organization's operations and the privacy of its stakeholders.

Details of the alleged data theft

According to the claims made by the Akira group, the stolen data consists of approximately 100 GB of information, comprising 82,794 files. The threat actors state that the stolen data includes various corporate documents and sensitive personal information. This type of announcement is a hallmark of the group's double-extortion strategy. In such scenarios, ransomware actors do not merely encrypt an organization's systems to disrupt operations; they also steal sensitive data to use as leverage. By threatening to leak the information publicly, the attackers aim to increase the pressure on the victim organization to meet their demands.

The content of the alleged leak is reported to include a wide range of sensitive documentation. While no screenshots have been provided to verify the claims, the group asserts that the following types of information are involved:

• Financial data (audits, payment details, financial reports, invoices)
• Employee information
• Customer information
• Credit card information
• Medical information
• Passport information
• Social Security Numbers
• Driver's licenses

About Great Lakes Carpet & Tile

Great Lakes Carpet & Tile is a flooring products distributor based in Wildwood, Florida. Founded in 1991, the company offers a variety of flooring brands to its customers. As a distributor in the retail and e-commerce sector, the company manages a range of logistical and customer-facing operations.

Implications and organizational risks

The alleged breach poses significant risks, particularly regarding identity theft and financial fraud for the organization's employees and customers. Given that the organization is located in the United States, the incident could lead to legal consequences under federal regulations and state-level data protection laws. The use of double-extortion tactics by the Akira group suggests a clear intent to damage the organization's reputation and disrupt its business operations by exposing sensitive data.

Publicly available information regarding the Akira group indicates that it operates as a Ransomware-as-a-Service (RaaS) model. This group is known to target both Windows and Linux environments and frequently exploits vulnerabilities in VPNs to gain access to networks. Because of the sensitive nature of the data mentioned in the claim, the organization may need to initiate formal notification procedures for the individuals affected by the breach.

For organizations operating in the retail and e-commerce sectors, such incidents highlight the importance of robust cybersecurity frameworks. Defensive measures typically include implementing multi-factor authentication, maintaining rigorous patch management to close vulnerabilities in remote access tools like VPNs, and conducting regular data encryption practices. Furthermore, maintaining comprehensive incident response plans is essential for managing the legal and reputational fallout that follows a major data exposure event.