Polykar listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: Canada
• Sector: Manufacturing
• Announcement date: July 18, 2025

The Akira ransomware group has officially listed the Canadian manufacturing company Polykar on its leak site. According to the announcement, the threat actors claim to have exfiltrated 16 GB of data belonging to the organization, which they have prepared for publication.

The alleged attack and claim

The threat actor, identified as the Akira ransomware group, announced on July 18, 2025, that they have allegedly compromised data belonging to Polykar. This announcement is linked to a reported cyberattack that occurred on November 26, 2024. The group claims to be in possession of a significant volume of corporate documents, totaling 16 GB, which they intend to release.

Ransomware groups often utilize leak sites to pressure victims into paying ransoms. These sites serve as a public gallery where stolen data is showcased to increase the visibility of the breach. In many cases, these groups employ a double-extortion tactic. This method involves not only encrypting a company's internal systems to halt operations but also stealing sensitive information to threaten its public release. This dual pressure aims to maximize the likelihood of receiving payment by threatening both operational continuity and corporate reputation.

Data types involved in the leak

While the threat actors have not provided any screenshots to verify their claims, the announcement specifies the types of information they have allegedly stolen. The data set is said to include various sensitive categories that could impact both the company and its stakeholders. The specific types of data mentioned in the listing include:

• Financial data
• Client data
• Payment details
• Personal information

The presence of such diverse data types—ranging from financial records to personal identifiers—suggests a broad compromise of the organization's digital environment. When such data is leaked, it often leads to secondary risks, such as targeted phishing campaigns or identity theft, as malicious actors can use the stolen information to impersonate employees or clients.

About Polykar

Polykar is an innovative manufacturing company based in Canada. The firm specializes in the production of sustainable flexible packaging solutions. Their product line focuses on eco-friendly packaging, specifically offering solutions that are 100% recyclable or compostable.

Risk assessment and industry implications

The alleged leak of Polykar's data may significantly increase the risk of identity theft or targeted phishing attacks against the organization's employees and clients. Because the company operates within Canada, the breach may trigger legal proceedings regarding data privacy violations under the Personal Information Protection and Electronic Documents Act (PIPEDA).

For organizations in the manufacturing sector, such breaches can pose secondary risks to the entire supply chain. If a key manufacturer's data is compromised, the integrity of the interconnected business relationships may be called into question. Furthermore, the Akira group is known to frequently exploit VPN accounts to gain unauthorized access to networks, highlighting a common vulnerability in modern remote-access infrastructures.

To defend against such threats, organizations typically focus on hardening their perimeter defenses. This includes implementing multi-factor authentication (MFA) on all remote access points, such as VPNs, to mitigate the risk of credential exploitation. Additionally, maintaining robust data encryption for sensitive files and implementing strict access controls can help limit the amount of data available to an attacker if a breach occurs. Continuous monitoring of network traffic and regular security audits are also essential components of a proactive defense strategy in the face of evolving ransomware tactics.