P.N. Sakkoulas listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: Greece
• Sector: Professional Services
• Announcement date: February 17, 2025

The Akira ransomware group has listed the Greek professional services firm P.N. Sakkoulas on its dedicated leak site. According to the announcement made on February 17, 2025, the threat actor group claims to have successfully gained access to the organization's internal corporate documents.

The alleged attack event

The listing appeared on the Akira ransomware group's leak site on February 17, 2025, which coincides with the date the group claims the attack took place. While the group has publicly claimed responsibility for the breach, it is important to note that no screenshots were provided in the announcement to verify the validity of the claim. The group is known for employing double-extortion tactics, a method where attackers not only encrypt an organization's data but also steal sensitive information to use as leverage. In such scenarios, the threat actors use the threat of leaking the stolen data on their public platforms to exert maximum pressure on the victim to pay the ransom.

Details of the alleged data breach

Although the announcement did not include any visual evidence or screenshots to confirm the contents of the breach, the group has specified the types of information they claim to have obtained. The alleged stolen data is described as containing sensitive corporate and personal information that could impact various stakeholders of the organization. The specific categories of data mentioned in the claim include:

• Employee contact information
• Customer contact information
• Financial data
• Contracts and licenses

The group has not provided information regarding the total size of the data stolen or the specific number of files involved in the incident. Furthermore, no ransom demand has been publicly disclosed in the announcement.

About P.N. Sakkoulas

P.N. Sakkoulas is a professional services organization based in Greece that operates within the legal publishing sector. The company specializes in the publication of legal literature, including various law books and specialized legal journals. Notable publications associated with the firm include "Criminal Chronicles" and "Chronicles of Private Law".

Impact and security considerations

This alleged breach by the Akira group may have significant implications for the operational continuity and the professional reputation of P.N. Sakkoulas. The nature of the data claimed to be stolen—including contact details and financial information—could lead to secondary risks for the affected parties. These risks include the potential for identity theft or the execution of targeted phishing attacks against both employees and customers of the firm.

Because the organization is located in Greece, this incident may result in legal consequences under the European Union's General Data Protection Regulation (GDPR), which governs the handling and protection of personal data within the EU. The potential for regulatory scrutiny is a common outcome for organizations facing data leaks involving personal information.

From a technical perspective, the Akira group has a known history of exploiting vulnerabilities in Virtual Private Networks (VPNs) to gain initial access to corporate networks. This pattern of behavior suggests that organizations in the professional services sector may need to re-evaluate their network security protocols, particularly regarding remote access points. To defend against such threats, organizations often implement multi-factor authentication, maintain rigorous patch management schedules for all internet-facing services, and conduct regular audits of their network security posture to mitigate the risk of unauthorized access.