QCN CO., LTD targeted by Akira ransomware group

• Ransomware group: Akira
• Country: Taiwan
• Sector: Technology
• Announcement date: January 28, 2025

Akira ransomware group claims data breach at QCN CO., LTD

The Akira ransomware group has listed data allegedly belonging to the technology company QCN CO., LTD on its leak site. This announcement, made on January 28, 2025, marks a new instance of the group targeting specific corporate entities to exert pressure through the threat of data exposure.

The group asserts that the stolen information consists of private corporate documents. According to the claims made by the threat actors, the volume of the compromised data is approximately 12 GB. While the group has published this information on their leak site, public information regarding the specific operations and background of the Akira group remains limited.

Details of the alleged data leak

The announcement made by the Akira group claims to involve a variety of sensitive corporate and personal information. Although the group has not provided any screenshots to verify the contents of the stolen files, the listing specifies several categories of data that have been targeted. The information allegedly includes:

• Employee contact information
• Customer contact information
• Financial data
• Contracts

The presence of such data types in a leak often indicates a focus on sensitive administrative and operational records. In many ransomware scenarios, threat actors target these specific categories to maximize the leverage they hold over an organization during negotiations.

About QCN CO., LTD

QCN CO., LTD is a technology company based in Taiwan. Since its establishment in 2010, the organization has been providing consulting services and developing various systems and applications. The company focuses its business operations on mobile solutions and overseas cooperation projects, serving a global client base through its technical expertise.

Impact and security implications

The alleged leak of these documents may pose significant risks to the operational confidentiality and customer trust of QCN CO., LTD. The nature of the data claimed to be stolen, particularly contact details and financial reports, could potentially facilitate identity theft or targeted phishing attacks against both employees and customers. Furthermore, the exposure of confidential agreements and contracts could result in secondary risks, such as undermining supply chain security.

The Akira group is known for employing double-extortion tactics. In these types of attacks, the threat actors do not merely encrypt the victim's systems but also steal sensitive data, threatening to publish it on a public leak site to increase pressure on the organization to pay the ransom. This method shifts the focus from simple service disruption to the permanent exposure of proprietary and private information.

For organizations operating in Taiwan, such incidents may present challenges regarding compliance with local data protection regulations. To mitigate the risks associated with such attacks, organizations typically focus on robust defensive measures. These include maintaining rigorous backup protocols, implementing multi-factor authentication across all systems, and conducting regular security awareness training to defend against phishing. Additionally, monitoring for unauthorized data exfiltration and ensuring strong encryption for sensitive data at rest and in transit are standard practices to reduce the impact of potential breaches.