Manko Window Systems listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: United States
• Sector: Manufacturing
• Announcement date: October 17, 2025

Akira ransomware group claims data breach at Manko Window Systems

The Akira ransomware group has listed the American manufacturing firm Manko Window Systems on its dedicated leak site. According to the group's announcement, they claim to have successfully gained access to corporate data belonging to the organization. This listing, which appeared on October 17, 2025, indicates that the threat actors have prepared a significant volume of data for potential publication.

The group has stated that approximately 20 GB of data is ready to be released. While the announcement confirms the intent to publish this information, the group has not explicitly stated a specific ransom demand in relation to this particular listing. This pattern is consistent with the operational behavior of ransomware groups that utilize leak sites to pressure victims through the threat of public exposure.

Details of the claimed data theft

The information allegedly stolen by the Akira group is extensive and covers multiple aspects of the organization's operations. The group claims that the stolen dataset includes a variety of sensitive documents that could impact various stakeholders. According to the announcement, the data consists of the following types of information:

• Client personal information (such as SSNs, dates of birth, and phone numbers)
• Employee information
• Financial and accounting records
• Project files
• Technical drawings
• Product specifications
• Non-disclosure agreements (NDAs)

It is important to note that the group did not provide any screenshots to verify the contents of the alleged breach. The nature of the data suggests that the breach could impact not only the internal operations of the company but also the privacy of its clients and the security of its intellectual property.

About Manko Window Systems

Manko Window Systems is an American company that specializes in the manufacturing of commercial windows, aluminum systems, and various glass products. Based in Kansas, the firm is a provider of custom window and door solutions specifically designed for architectural projects. Given their role in the manufacturing sector, the company handles significant technical and project-specific documentation.

Potential risks and industry implications

The alleged exposure of this data carries significant secondary risks. For the employees and clients of Manko Window Systems, the theft of personal identifiers like Social Security numbers and contact details increases the risk of identity theft and targeted phishing attacks. Furthermore, because the organization is based in the United States, the exposure of such personal data may trigger specific legal obligations under federal regulations and various state laws regarding data protection and breach notification.

The Akira group is known for employing double extortion tactics. In a double extortion scheme, attackers do not just encrypt a company's systems to disrupt operations; they also steal sensitive data to threaten the victim with its public release. This tactic is designed to maximize leverage during negotiations. The group is also frequently associated with targeting vulnerabilities in Virtual Private Networks (VPNs) to gain initial access to corporate networks.

For organizations in the manufacturing sector, the publication of such data can be devastating to trade secrets and intellectual property. The loss of technical drawings and product specifications can undermine competitive advantages. To defend against such threats, organizations typically focus on securing remote access points, implementing robust encryption for data at rest and in transit, and maintaining strict access controls to limit the movement of attackers within a network. Given the history of the Akira group, there is a possibility that the claimed data may be shared across various platforms in the future.