Meleam S.p.A. listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: Italy
• Sector: Professional Services
• Announcement date: June 30, 2025

Akira ransomware group claims breach of Meleam S.p.A.

The Akira ransomware group has officially listed the Italian organization Meleam S.p.A. on its dedicated leak site. According to the announcement made on June 30, 2025, the threat actor group claims to have successfully compromised the organization's network. This development follows an alleged initial intrusion that took place on May 29, 2025. The group asserts that they have exfiltrated a significant volume of information, specifically claiming to have obtained over 12 GB of documents from the company's systems.

Ransomware attacks involving leak sites often follow a pattern of double extortion. In this model, attackers do not merely encrypt a victim's files to disrupt operations; they also steal sensitive data to use as leverage. By threatening to publish the stolen information on a public platform, the attackers aim to pressure the victim into paying a ransom to prevent the exposure of confidential details. While the specific ransom demand for this incident has not been disclosed, the threat of data publication remains a primary weapon for groups like Akira.

Details of the alleged data theft

The Akira group's announcement suggests that the stolen data contains highly sensitive information that could impact various stakeholders. Although the group has not provided any screenshots to verify the contents of the stolen files, the alleged leak includes several critical categories of information. The data reportedly includes:

• Financial audit reports
• Payment details
• Personal information of clients
• Personal information of employees
• Confidential contracts

The presence of such diverse data types—ranging from financial records to personal identifiers—indicates a broad compromise of the organization's digital environment. The potential exposure of these files poses a direct risk to the operational security and data privacy of Meleam S.p.A.

About Meleam S.p.A.

Meleam S.p.A. is an Italian-based company that provides consulting services in occupational health and safety, risk assessment, training, and corporate compliance. The company manages certification and audit processes necessary for businesses to comply with legal regulations. Given its role in managing compliance and auditing, the organization handles significant amounts of sensitive corporate and personal information.

Potential impact and industry risks

The alleged breach of Meleam S.p.A. carries significant implications for the organization and its associates. For the clients and employees whose personal data is reportedly involved, the breach may create secondary risks, such as identity theft or fraud. Furthermore, because the organization operates within the professional services sector, an incident of this nature may increase risks regarding supply chain security, as the company is integrated into the compliance and audit workflows of its clients.

From a regulatory perspective, the sensitivity of the claimed data means the organization may face significant administrative fines under the General Data Protection Regulation (GDPR). The exposure of trade secrets and confidential contracts through the Akira group's double extortion method could also lead to substantial reputational damage. In such scenarios, organizations typically focus on incident response, forensic investigation, and strengthening defensive measures to mitigate future risks.