Jinny Corporation listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: August 21, 2024

Jinny Corporation targeted by Akira ransomware group

Jinny Corporation has been listed on the leak site of the Akira ransomware group. According to the announcement made on August 21, 2024, the threat actor claims to have carried out an attack against the organization on the same day. The Akira group asserts that they have successfully obtained approximately 400 GB of data allegedly belonging to Jinny Corporation and has stated that these files will be published soon.

Details of the claimed data theft

The threat actor's announcement claims that the stolen data includes a variety of sensitive information. While no screenshots have been provided to verify the contents of the breach, the group claims that the following types of data are involved:

• Employee personal data
• Financial records
• Accounting data
• Non-disclosure agreements

The Akira group is identified as a Ransomware-as-a-Service (RaaS) operation that emerged in early 2023. This group is known for employing double extortion tactics, a method where attackers not only encrypt an organization's data but also steal sensitive information to use as leverage for extortion. By threatening to leak the stolen data publicly, the attackers increase the pressure on the victim to pay the ransom. Publicly available information indicates that the group targets various environments, including Windows, Linux, and virtualization environments.

The organization profile

Jinny Corporation is the world's largest distributor of multi-cultural and ethnic beauty supplies. The company provides a wide range of hair and beauty products to professional salons and retailers.

Potential impact and security implications

If the leak claim is verified, the exposure of employee personal data could lead to identity theft and targeted phishing attacks. Furthermore, the publication of financial and accounting records may result in the disclosure of trade secrets and damage the organization's competitive advantage. As a United States-based entity, the organization may face data breach notification obligations under relevant state laws and federal regulations.

The use of the Akira group's double extortion method may increase pressure on the organization, potentially leading to secondary risks and negatively impacting supply chain security. When sensitive documents like non-disclosure agreements are involved, the breach can impact legal and contractual relationships.

In general, organizations facing such threats often focus on defensive measures to mitigate the impact of ransomware. This typically includes maintaining robust backup solutions, implementing strict access controls, and ensuring that all software and operating systems are regularly patched. For companies in the retail and e-commerce sectors, protecting the integrity of financial and supply chain data is critical to maintaining operational continuity and consumer trust. The threat of data publication necessitates a comprehensive incident response plan to manage potential legal, regulatory, and reputational consequences.