Peikko allegedly targeted by Akira ransomware group

• Ransomware group: Akira
• Country: Finland
• Sector: Professional Services
• Announcement date: January 10, 2025

Akira ransomware group claims data leak of Peikko

The Akira ransomware group has claimed responsibility for a data breach involving Peikko, a global supplier specializing in connection technology. According to an announcement made on the group's leak site on January 10, 2025, the attackers claim to have exfiltrated a significant amount of information belonging to the organization.

The incident was announced on January 10, 2025, with the group alleging that the attack itself occurred on the same day. While the group has listed the data on their platform, they have not provided any screenshots to verify the contents of the alleged breach. No information regarding a ransom demand has been made public by the group.

Details of the alleged data breach

The Akira ransomware group claims to have listed approximately 30 GB of data on their leak site, which they allege belongs to Peikko. The group asserts that the stolen information includes various internal corporate documents and private records. The announcement suggests that various documents related to the organization's operations may be made public as a result of this incident.

The contents of the alleged leak are reported to include a variety of sensitive files. According to the claims made by the group, the following types of data are involved:

• Financial documents
• Disclosure agreements
• Taxpayer identification numbers
• Employee contact information
• HR documents

The group has not provided specific details regarding the file count or the exact nature of the documents beyond these categories.

About Peikko

Peikko Group is a global supplier specializing in connection technology for precast and cast-in-situ construction, slim floor structures, and wind energy applications. The company provides innovative solutions for the construction industry and operates on a global scale.

Potential impact and security implications

The alleged leak may pose significant data privacy risks for the organization's employees and business partners. The nature of the exposed data, which includes employee contact information and HR documents, could increase the likelihood of employees being subjected to identity theft or targeted phishing attacks. Such attacks often leverage stolen personal details to gain trust and manipulate individuals into revealing further credentials or funds.

Since the organization is based in Finland, a potential data breach could lead to legal processes and sanctions under the EU General Data Protection Regulation (GDPR). The exposure of financial documents and taxpayer identification numbers further complicates the regulatory landscape for the company.

The Akira group is known for employing double extortion tactics. In such scenarios, attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to threaten its public release. This tactic is designed to maximize pressure on the victim by threatening their commercial reputation. The publication of this data may negatively impact the organization's standing with its clients and partners. Information regarding the specific capabilities and history of the Akira group remains limited.

In general, when organizations face such threats, defensive measures often include implementing robust multi-factor authentication, maintaining offline backups, and conducting regular security awareness training to mitigate the risk of phishing. However, the specific response from Peikko has not been disclosed.