Infosoft listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: New Zealand
• Sector: Technology
• Announcement date: March 6, 2024

The Akira ransomware group has claimed responsibility for a cyberattack targeting Infosoft, a software development company based in New Zealand. According to an announcement made on the group's leak site on March 6, 2024, the threat actors allege they have successfully compromised the organization's systems and obtained sensitive information.

The claimed ransomware attack

The incident was officially announced by the Akira group on March 6, 2024. In their public listing, the group claims to have carried out a ransomware attack against Infosoft. The threat actors allege that they have gained unauthorized access to the company's internal operational files and various project documents. The group has indicated that the stolen data is intended to be made available for download in the near future, a common tactic used by ransomware operators to pressure victims.

While the group has made these claims, it is important to note that no screenshots were provided in the announcement to verify the contents of the breach. Furthermore, the group has not disclosed specific details regarding the total volume of data stolen or the specific number of files compromised during the intrusion.

Data involved in the breach

The announcement from the Akira group claims that the breach involves several categories of sensitive information. The group alleges that the compromised data includes operational files, various projects, and documents that contain personal information. The specific types of data claimed to be affected include:

• Personal data
• Operational files
• Project documents

The group has not specified the exact nature of the personal information or the specific projects involved in the leak.

About Infosoft

Infosoft is a software development company operating out of New Zealand. The organization provides an integrated range of products and services that span the entire software lifecycle, including software design, development, implementation, and ongoing support.

Analysis and potential implications

This incident highlights the ongoing risks faced by technology firms. Given the Akira group's known use of double extortion methods—where attackers not only encrypt data but also threaten to leak it publicly—the potential for significant reputational damage is high if the stolen data is released. In such scenarios, the public disclosure of sensitive information can undermine trust between a service provider and its clients.

The breach may also result in secondary risks for the company's employees and customers. These risks include the possibility of identity theft or the execution of targeted phishing attacks using the information obtained during the breach. For an organization operating in the technology sector, maintaining the integrity of project documents and operational files is critical to business continuity and client trust.

From a regulatory perspective, the company may face data breach notification obligations under the privacy laws of New Zealand. Organizations facing similar threats often find it necessary to review their data security processes and ensure that all affected parties are notified according to legal requirements.

While public information regarding the Akira group remains limited, similar attacks in the cyber landscape have frequently observed the exploitation of vulnerabilities in VPN systems. To mitigate such risks, organizations typically focus on strengthening their perimeter defenses and monitoring for unauthorized access. This incident underscores the importance of robust security frameworks to protect sensitive operational and personal data from sophisticated ransomware groups.