Innomotive Solutions Group listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: United States
• Sector: Manufacturing
• Announcement date: December 1, 2025

The Akira ransomware group has officially listed Innomotive Solutions Group on its dedicated leak site. According to the announcement, the threat actor group claims to have obtained approximately 10 GB of data belonging to the organization. This listing serves as a public notification from the group, indicating their intention to release the stolen information to the public if their demands are not met.

The claimed cyber incident

The threat actor group announced the addition of Innomotive Solutions Group to its leak site on December 1, 2025. According to the claims made by the group, the breach occurred following a cyber incident that took place on September 18, 2025. The group asserts that they successfully gained access to various corporate documents during this period.

The Akira group has stated that the data they claim to have exfiltrated is currently ready to be released to the public. This tactic is a hallmark of modern ransomware operations, where the threat actors move beyond simple encryption to focus on data exfiltration to increase their leverage over the victim.

The types of data involved

While the group has not provided any screenshots to verify the contents of the stolen files, they have specified the categories of information that are allegedly included in the 10 GB dataset. The leaked information is said to encompass a wide range of sensitive corporate and personal records.

The data types claimed by the group include:

• Personal employee information (passports, phone numbers, emails)
• Financial records
• Client data
• Project files
• Agreements
• Non-disclosure agreements (NDA)

The inclusion of such sensitive information, particularly personal identification documents like passports, significantly elevates the severity of the alleged breach.

About Innomotive Solutions Group

Innomotive Solutions Group is a North American company that operates within the manufacturing sector. The organization specializes in the production of high-quality roll-up doors, LED lighting, and power lifting systems designed specifically for trucks and specialty vehicles.

Analysis and potential risks

The situation involving Innomotive Solutions Group highlights the growing risks associated with double-extortion ransomware tactics. In these scenarios, attackers not only encrypt an organization's systems but also steal sensitive data to use as leverage. The publication of the alleged data could lead to significant secondary risks, such as identity theft and fraud targeting the organization's employees and clients.

Because Innomotive Solutions Group is based in the United States, the breach may necessitate a legal evaluation under various state-level data protection laws and potential regulatory obligations. Furthermore, the sensitivity of the alleged data could negatively impact the company's commercial reputation and create secondary risks for its partners within the supply chain.

The methods used by the Akira group are often associated with the exploitation of VPN accounts, which suggests that vulnerabilities in an organization's network security processes may be a primary entry point. While public information regarding this specific group remains limited, the potential impact of such an attack on a manufacturing entity is substantial. Organizations in this sector can mitigate such risks by implementing robust security measures, such as multi-factor authentication on all remote access points, continuous monitoring of network traffic, and comprehensive employee training to prevent unauthorized access.