Santa Cruz Properties targeted by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Professional Services
• Announcement date: April 25, 2025

The Akira ransomware group has claimed responsibility for a data breach involving Santa Cruz Properties. According to an announcement made on the group's leak site on April 25, 2025, the threat actors have listed a significant volume of data that they allege belongs to the Texas-based organization.

The alleged data leak event

The Akira ransomware group has listed 15 GB of data, which they claim belongs to Santa Cruz Properties, on their leak site. The threat actor states that the data includes documents related to the company's operational processes. This announcement, which is categorized as a data leak, was made on the same day as the claimed attack date, April 25, 2025.

In many modern ransomware campaigns, threat actors utilize a method known as double extortion. In this scenario, attackers do not merely encrypt an organization's files to disrupt operations; they also exfiltrate sensitive information before the encryption process begins. The threat actors then use the threat of leaking this stolen data on public leak sites to increase pressure on the victim organization to pay the ransom. While the group has posted this claim on their platform, no screenshots were provided in the announcement to verify the contents of the leak.

Contents of the claimed data breach

The data allegedly stolen by the Akira group is described as containing various sensitive documents related to the internal operations of the organization. The specific types of information identified in the claim include a wide range of corporate and personal records. The following items are reported to be part of the alleged leak:

• Employee personal information
• Customer data
• Financial data
• Contracts
• Non-disclosure agreements

It is important to note that no screenshots or specific file samples were provided in the announcement to substantiate the presence of these specific data types. The group has not disclosed a ransom demand in relation to this specific claim.

About Santa Cruz Properties

Santa Cruz Properties is a real estate company based in Texas. It provides consulting and guidance services to its clients throughout the property buying and selling processes.

Impact assessment and organizational risks

This alleged leak by the Akira group may pose secondary risks such as identity theft and targeted phishing attacks for the company's employees and customers. When personal and financial information is exposed, individuals targeted by the breach may face increased risks of fraudulent activities. Furthermore, the exposure of financial data and non-disclosure agreements could lead to a loss of commercial reputation and a weakening of competitive advantage for the organization.

Because the company is based in the United States, the breach may trigger specific legal obligations. Data breach notification requirements under relevant state laws and federal regulations may arise depending on the nature of the compromised data. The publication of leaked data can significantly increase the pressure on an organization and could negatively impact operational continuity.

For organizations operating in the professional services sector, maintaining robust cybersecurity postures is essential to mitigate such risks. Common defensive steps often include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training for employees to recognize phishing attempts. Additionally, organizations often focus on data encryption and strict access controls to limit the potential impact of an exfiltration event.