Indesmalla listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: Argentina
• Sector: Manufacturing
• Announcement date: April 15, 2026

Indesmalla targeted by Akira ransomware group

The manufacturing company INDESMALLA has been listed on the leak site of the Akira ransomware group. According to the announcement posted on April 15, 2026, the group claims to have obtained data belonging to the organization. The breach allegedly involves both the company's production and corporate data. The threat actors have indicated that the relevant data will be published in the near future.

Details of the claimed breach

The Akira group's announcement specifies that a wide range of sensitive information has been compromised during the attack. While no screenshots were provided to verify the claims, the group asserts that they have successfully accessed various categories of internal documentation. The breach is reported to include the following types of data:

• Employee personal data
• Financial records
• Contracts
• Client files
• Project files
• Non-disclosure agreements

The group's claim of a breach involving these specific files suggests a significant compromise of the organization's internal administrative and operational environment. It is important to note that the specific volume of the data and the total file count have not been disclosed by the group.

About Indesmalla

Indesmalla is a textile company based in Spain. The organization specializes in the production of knitted fabrics using Raschel and Ketten machines. Their manufacturing capabilities allow them to offer various weights, elasticities, and textures to meet diverse industrial requirements.

Impact and potential risks

This incident may negatively impact the company's operational continuity and commercial reputation. Given the nature of the data claimed to be stolen, secondary risks could emerge, such as identity theft or targeted phishing attacks directed at employees and clients. Furthermore, the company may face legal obligations under Argentine data protection regulations.

The Akira group's use of a double extortion method may increase the risk of privacy violations if the data is published. In double extortion, attackers not only encrypt a victim's systems but also steal sensitive information, threatening to leak it on public forums to pressure the organization into paying a ransom. This tactic significantly heightens the stakes for organizations, as the threat of public exposure remains even if systems are restored from backups.

While public information regarding the Akira group remains limited, similar attacks in the past have observed the exploitation of VPN vulnerabilities to gain initial access to networks. For organizations in the manufacturing sector, maintaining robust security postures is critical. This includes implementing multi-factor authentication, ensuring all remote access solutions like VPNs are patched against known vulnerabilities, and maintaining strict monitoring of network traffic to detect unauthorized data exfiltration. Protecting sensitive intellectual property, such as project files and client contracts, is essential for maintaining commercial trust and avoiding the legal complexities that follow large-scale data leaks.