Parrish Tire targeted by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Transportation
• Announcement date: November 28, 2025

Akira ransomware group claims data breach at Parrish Tire

The Akira ransomware group has listed a significant amount of data on its leak site, claiming the information belongs to Parrish Tire. According to the announcement made on November 28, 2025, the group alleges that they successfully exfiltrated corporate data following an attack that reportedly took place on September 25, 2025. The group has indicated that the files are prepared for publication, signaling a potential escalation in their extortion attempt.

Details of the alleged data leak

The group claims to have obtained approximately 10 GB of corporate documents. While the announcement states that the data is ready for release, no screenshots were provided to verify the contents of the files. The information allegedly stolen includes a variety of sensitive corporate and personal records. According to the group's claims, the following types of data are involved:

• Personal employee data
• Client data
• Credit card details (approximately 150)
• Financial records
• Agreements

The presence of such diverse data types suggests a broad intrusion into the organization's digital environment, targeting both internal administrative files and external customer information.

About Parrish Tire

Parrish Tire Company is a major tire dealer operating in the southeastern United States. The company provides services through wholesale, retail, and commercial truck tire centers, serving a wide range of needs within the transportation sector.

Implications and risks of the alleged breach

This alleged data breach suggests that employees and clients of Parrish Tire may be exposed to significant identity theft risks. The potential exposure of credit card details is particularly concerning, as it could lead to various financial fraud activities. Because the organization is a US-based entity, it may face specific data breach notification obligations under relevant state laws and federal regulations following such an incident.

The tactics employed by the Akira group appear to follow the double-extortion model. In these types of attacks, ransomware actors do not just encrypt an organization's systems to disrupt operations; they also steal sensitive data to use as leverage. By threatening to publish the stolen information on a public leak site, the attackers increase the risk of reputational damage and create the possibility of secondary attacks against the organization or its clients.

When organizations face these types of threats, they often need to conduct a thorough forensic analysis to determine the actual scope of the leaked data and identify the exact point of entry. Furthermore, notifying affected parties is a critical step in managing the fallout of a breach. In the transportation and retail sectors, maintaining the integrity of client and financial data is vital for operational trust and regulatory compliance.