Gustavo Preston targeted by Akira ransomware group in alleged data leak

• Ransomware group: Akira
• Country: United States
• Sector: Manufacturing
• Announcement date: March 24, 2026

Akira ransomware group claims data breach at Gustavo Preston

The Akira ransomware group has officially listed Gustavo Preston on its leak site, claiming to have exfiltrated a significant amount of sensitive information. According to the announcement made on March 24, 2026, the threat actors allege they have obtained approximately 31 GB of data belonging to the organization. This claim follows an alleged attack date of October 15, 2025.

Ransomware groups often utilize leak sites to pressure victims into paying ransoms. These sites serve as a public gallery where attackers post proof of their intrusion and the stolen data. This tactic is a core component of the double-extortion method, where attackers not only encrypt an organization's systems to disrupt operations but also threaten to release sensitive data to the public to maximize leverage over the victim.

Details of the alleged data theft

The Akira group has announced this data leak claim against Gustavo Preston, asserting that they have successfully obtained data related to the company's commercial pump solutions and its associated services. The threat actors have stated that the mentioned data is intended to be uploaded in the near future, creating an ongoing sense of urgency for the targeted entity.

While no screenshots have been provided to verify the contents of the breach, the group claims the stolen data is highly sensitive. The alleged data includes a wide variety of personal and corporate information, such as:

• Employee identity information
• Medical records
• Financial data
• Client information
• Credit card information

The presence of such diverse data types suggests a deep penetration into both human resources and client-facing databases. The inclusion of items like employee passports, driver's licenses, addresses, phone numbers, emails, and medical records highlights the potential for significant identity theft. Furthermore, the claim includes financial documents, credit card information, and confidential documents, as well as non-disclosure agreements (NDAs).

About Gustavo Preston

Gustavo Preston Company is an American company specializing in the design, sale, and service of commercial pump solutions. Their product portfolio includes water boosters, wastewater pumps, and commercial water heaters. Beyond hardware, the company provides comprehensive technical services, including essential maintenance and repair for various types of pump equipment.

Potential impact and organizational risks

The leak claim made by the Akira group may pose a significant risk of exposing sensitive personal employee data and confidential corporate information. Because the organization is based in the United States, the exposure of such data may trigger legal processes under various state-level data protection laws and potential federal regulations. The sensitive nature of the information, particularly medical and financial records, increases the severity of the incident.

The exposed data could create secondary risks for the organization and its stakeholders, specifically regarding identity theft and the potential for targeted phishing attacks. In such scenarios, attackers use stolen contact information and personal details to craft highly convincing fraudulent communications to deceive employees or clients.

Given the Akira group's use of the double-extortion method, the company may face negative impacts on its operational continuity and its overall reputation. While public information regarding this specific group remains limited, the threat they pose to organizational stability is clear. For companies in the manufacturing and service sectors, maintaining robust cybersecurity postures is essential to mitigate these risks. This typically involves implementing strict access controls, regular security audits, and comprehensive data encryption to protect both corporate and personal information from unauthorized exfiltration.