LaboratoriosBelloch data allegedly leaked by Akira ransomware group

• Ransomware group: akira
• Country: Spain
• Sector: Manufacturing
• Announcement date: May 28, 2025

Akira ransomware group claims data breach against LaboratoriosBelloch

The Akira ransomware group has announced a data breach involving LaboratoriosBelloch, a company operating in the manufacturing sector. According to a post on the group's leak site announced on May 28, 2025, the attackers claim to have exfiltrated a significant amount of sensitive information. The group alleges that the data was obtained on May 16, 2025, and has since been made available for download via the torrent protocol.

Ransomware attacks of this nature often follow a pattern where threat actors gain unauthorized access to a network to steal sensitive files before deploying encryption. In many modern cyberattacks, groups utilize a method known as double extortion. This tactic involves not only encrypting the victim's systems to disrupt operations but also threatening to leak stolen data on public leak sites if a ransom is not paid. This approach increases the pressure on the target organization by threatening their reputation and legal standing.

Details of the alleged data leak

The Akira ransomware group claims to have published 25 GB of data belonging to LaboratoriosBelloch. While the group has provided the data through a torrent protocol, no screenshots were provided in the announcement to verify the contents of the leak. No information regarding a ransom demand was provided in the source announcement.

The data allegedly stolen from the organization includes a variety of sensitive files that could impact various departments. The claimed data types include:

• Financial records
• Client information
• Contracts
• Correspondence
• Employee personal documents
• Project files

The presence of such diverse data types suggests a broad compromise of the organization's digital environment, ranging from administrative and financial departments to human resources and project management.

About LaboratoriosBelloch

LaboratoriosBelloch is a Spanish company that specializes in the development and manufacture of cosmetic and personal care products. The organization operates under several established brands, including Nelly, Yunsey, and Fresh Feel. Their production focus is specifically centered on hair care and body care products, serving the needs of the personal care market through these specialized brands.

Potential impact and security implications

This alleged leak carries significant risks for both the organization and the individuals whose information may be contained within the 25 GB of data. The inclusion of personal and financial information suggests that the company could face administrative sanctions under the General Data Protection Regulation (GDPR) due to the exposure of sensitive data. For the employees and clients of LaboratoriosBelloch, the leak increases the risk of identity theft and makes them targets for highly specific, targeted phishing attacks.

Furthermore, the stolen information could potentially be utilized to facilitate supply chain attacks, where attackers use the credentials or data of one company to gain access to its partners or customers. The loss of project files and contracts can lead to operational disruptions and long-term reputational damage. In such scenarios, organizations typically focus on incident response, such as isolating affected systems, conducting forensic investigations, and notifying regulatory bodies and affected parties.

Publicly available information regarding the Akira group remains limited, making it difficult to attribute the attack to a specific sophisticated actor or to predict their long-term objectives beyond the immediate extortion attempt. As with all data breaches, the impact is often felt most acutely in the aftermath, as the stolen data continues to circulate in various digital spaces.