Metalmatrix Clamps targeted by Akira ransomware group

• Ransomware group: Akira
• Country: Brazil
• Sector: Manufacturing
• Announcement date: January 10, 2025

Akira ransomware group claims data breach at Metalmatrix Clamps

The Akira ransomware group has listed a data leak announcement on their dedicated leak site involving the Brazilian manufacturing company Metalmatrix Clamps. According to the claims made by the threat actors, the breach occurred on January 10, 2025, and involves a significant volume of stolen information.

The group asserts that they have successfully exfiltrated a dataset totaling 10 GB from the organization's systems. This incident follows a pattern of double extortion tactics frequently employed by modern ransomware groups. In such scenarios, attackers not only encrypt an organization's internal systems to disrupt operations but also steal sensitive information to use as leverage. By threatening to publish the exfiltrated data on public leak sites, the group attempts to pressure the victim into paying a ransom to prevent the exposure of corporate and personal secrets.

Details of the alleged data exfiltration

The threat actors claim to have obtained a wide range of internal corporate documents and personal information during the attack. While the group has not provided any screenshots to verify the contents of the stolen files, they have specified several categories of sensitive data that are allegedly included in the 10 GB dataset. The information reportedly contains critical business and personal identifiers that could be exploited for further malicious activities.

The data types allegedly stolen include:

• Financial records
• CNPJ numbers
• Employee contact information
• Customer contact information
• Email addresses

The presence of such diverse data types—ranging from financial documentation to direct contact details for both staff and clients—suggests a broad compromise of the organization's digital environment. The group has not disclosed a specific ransom demand for the return or non-disclosure of this information.

About Metalmatrix Clamps

Metalmatrix Clamps is a Brazil-based manufacturing company that specializes in the production of safe clamps designed for various industrial sectors. The company maintains a significant operational footprint, with representatives located throughout Brazil. Furthermore, the organization is involved in international trade, exporting its manufactured products to various markets worldwide.

Potential impact and security implications

This incident carries significant risks for both the organization and the individuals whose data has been compromised. The exposure of internal financial data could lead to substantial reputational damage and create competitive disadvantages for the company in the global market. Furthermore, the leak of employee and customer contact details, such as email addresses, significantly increases the risk of identity theft and targeted phishing attacks against these individuals.

From a regulatory perspective, the exposure of such data may lead to intense scrutiny under Brazil's LGPD (Lei Geral de Proteção de Dados), as the institution must adhere to strict data protection obligations. The nature of the data suggests that the group may have gained access through common attack vectors, such as the exploitation of VPN credentials or through the execution of phishing campaigns.

For organizations operating in the manufacturing sector, this incident highlights the necessity of robust defensive measures. To mitigate the risk of similar attacks, companies often focus on securing remote access points, implementing multi-factor authentication to protect credentials, and conducting regular security awareness training to defend against phishing. Given the known tactics of the Akira group, there is a high probability that the leaked data could be utilized for secondary attacks against the company or its partners.