Saskarc targeted by Akira ransomware group in alleged data breach

• Ransomware group: Akira
• Country: Canada
• Sector: Manufacturing
• Announcement date: October 6, 2025

The Akira ransomware group has claimed responsibility for a data breach involving the Canadian organization Saskarc. According to an announcement posted on a leak site, the threat actors allege they have successfully exfiltrated a significant volume of sensitive information belonging to the company.

Details of the alleged incident

The threat actor, identified as the Akira ransomware group, has listed a substantial amount of data on their dedicated leak site. The group claims to be in possession of 54 GB of data that they assert belongs to Saskarc. While the announcement was officially published on October 6, 2025, the group states that the actual incident occurred on September 22, 2025.

In such cyberattack scenarios, threat actors often utilize a method known as double extortion. This tactic involves not only encrypting an organization's internal systems to disrupt operations but also stealing sensitive data beforehand. The attackers then threaten to release this stolen information on public leak sites if their demands are not met, thereby exerting maximum pressure on the victimized entity.

Claimed data types and content

The Akira group claims to possess a wide variety of documents that could compromise the organization's privacy and operational integrity. According to the group's claims, the stolen information includes various types of sensitive documentation. While no screenshots were provided by the attackers to verify the contents of the leak, the group asserts that the data contains the following:

• Financial data
• Personal data
• Corporate documents

More specifically, the group alleges that the leaked data includes financial records such as audits, payment details, financial reports, and invoices. Furthermore, the claim suggests that the cache of stolen information contains confidential corporate information and detailed personal data. The presence of such diverse data types increases the potential impact of the breach on both the company and the individuals involved.

About Saskarc

Saskarc Inc. is a company based in Canada. The organization provides a range of specialized services, including engineering, manufacturing, and installation. Their operations support several critical industrial sectors, such as the petrochemical, oil and gas refineries, mining, power generation, and food processing industries.

Potential implications and organizational risks

The claims made by the Akira group pose significant risks to the organization. The exposure of financial processes and the personal information of employees or customers can lead to various secondary threats. For instance, stolen personal data is frequently utilized by cybercriminals for identity theft or to launch highly targeted phishing attacks against specific individuals within or related to the organization.

For organizations operating within Canada, such an incident may trigger legal obligations. Under the Personal Information Protection and Electronic Documents Act (PIPEDA), companies may be required to follow specific data breach notification protocols if personal information is compromised. These regulations are designed to ensure transparency and protect the privacy rights of individuals.

In the manufacturing and industrial sectors, maintaining the confidentiality of corporate documents is vital for protecting intellectual property and trade secrets. When a breach occurs, organizations typically focus on incident response, which includes containing the threat, assessing the scope of the data exfiltration, and strengthening defensive perimeters. Common defensive strategies include implementing robust access controls, maintaining offline backups, and conducting regular security awareness training to mitigate the risk of initial access through phishing or other common vectors.