Itasca Consulting Group listed by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Technology
• Announcement date: January 13, 2026

Akira ransomware group claims data breach at Itasca Consulting Group

The Akira ransomware group has officially listed Itasca Consulting Group on its dedicated leak site. According to the group's announcement, they claim to have successfully exfiltrated 20 GB of corporate data belonging to the organization. This development follows a pattern of double-extortion tactics frequently employed by modern ransomware actors, where stolen information is used as leverage to pressure victims into paying ransoms.

Details of the alleged attack

The Akira group published a formal notice regarding the breach on January 13, 2026. In this announcement, the threat actors claim to have obtained significant amounts of data related to the engineering and software operations of Itasca Consulting Group. The group has indicated that the stolen information is scheduled to be released in the near future, heightening the urgency of the situation for the targeted entity.

While the group has posted the claim on their leak site, it is important to note that no screenshots of the stolen data have been provided to the public at this time. The announcement serves as a notification of the alleged theft rather than a verified confirmation of a successful breach.

Scope of the claimed data theft

The information allegedly stolen by the Akira group is extensive and covers various sensitive areas of the company's operations. According to the details provided in the group's notice, the stolen data includes a wide range of sensitive files and personal information. The specific types of data mentioned in the claim include:

• Employee personal data
• Client information
• Financial records
• Credit card information
• Non-disclosure agreements

The inclusion of such diverse data types—ranging from internal confidential files and project details to highly sensitive personal identifiers—suggests a broad infiltration of the organization's digital environment.

About Itasca Consulting Group

Itasca Consulting Group is a global engineering consulting and software firm. The organization specializes in several highly technical fields, including geomechanics, hydrogeology, and microseismics. Beyond consulting services, the company is known for developing technical solutions and specialized software tools designed for complex geosciences and engineering projects.

Potential impact and security implications

This incident carries significant risks for all parties involved. For the employees and clients of Itasca Consulting Group, the alleged leak of personal information, such as addresses, phone numbers, emails, and scans of personal documents, poses a direct risk of identity theft and fraud. Furthermore, the potential exposure of financial records, credit card information, and non-disclosure agreements (NDAs) could severely impact the firm's commercial reputation and business relationships.

As a United States-based entity, the organization may find itself subject to specific data breach notification requirements mandated by relevant state laws and federal regulations. The nature of the data stolen suggests that the organization's network security posture may require a thorough and comprehensive review.

The Akira group is known for a tendency to exploit vulnerabilities in Virtual Private Networks (VPNs) to gain initial access to corporate networks. This specific method of entry underscores the importance of robust perimeter security and continuous monitoring. In such scenarios, organizations often face secondary risks, including targeted phishing campaigns and further attacks aimed at exploiting the leaked information. To mitigate these risks, organizations in the technology and engineering sectors typically focus on strengthening authentication protocols, implementing strict access controls, and ensuring that all remote access points are rigorously patched and monitored.