Spokane Produce listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: United States
• Sector: Agriculture and Food Production
• Announcement date: September 4, 2025

Akira ransomware group claims data breach at Spokane Produce

The Akira ransomware group has officially listed data allegedly belonging to Spokane Produce on its dedicated leak site. According to the announcement made by the threat actors, the group claims to have successfully compromised the organization's systems and obtained a significant volume of corporate information. The group alleges that the stolen data set consists of approximately 74 GB of files, which they have listed on their platform as part of their extortion efforts.

The announcement regarding this incident was published on September 4, 2025. While the group has claimed to have obtained a large amount of data, specific details regarding the exact nature of the breach or the group's specific demands have not been provided in the public listing. It is important to note that the information provided by the group remains an allegation until verified through independent investigation.

Details of the alleged data theft

The Akira group's announcement suggests a wide-reaching compromise of the organization's digital assets. The group claims that the stolen information includes a variety of sensitive corporate and personal records. While no screenshots were provided to substantiate the claims, the group alleges that the following categories of data are included in the 74 GB cache:

• Financial data, such as audits, payment details, and invoices
• Employee information
• Customer information
• Medical information
• Identity information, including driver's licenses, birth certificates, emails, and phone numbers
• Non-disclosure agreements (NDAs)
• Other confidential corporate documents

The breadth of the data described in the claim suggests a targeted attempt to acquire information that is highly sensitive for both the company and the individuals involved. In many modern ransomware campaigns, such as those conducted by Akira, the threat actors utilize a method known as double extortion. In this tactic, the attackers not only encrypt the victim's systems to disrupt operations but also steal sensitive data beforehand. The threat of leaking this data on a public site is then used as additional leverage to pressure the victim into paying the ransom.

About Spokane Produce

Spokane Produce is an established business that has been operating since the 1940s. As a family-owned company, it specializes in the distribution of various products, including fresh produce, cut fruits and vegetables, deli items, and floral arrangements. Based in Washington, the organization plays a significant role in the regional food supply chain, making it a key player in the local agricultural and food production sector.

Potential risks and industry implications

The alleged leak of such a diverse range of data poses several secondary risks. For the employees and customers of Spokane Produce, the exposure of identity information, medical records, and contact details could lead to serious consequences, such as identity theft and highly targeted phishing attacks. These types of social engineering attacks often use stolen personal details to gain further access to other systems or to defraud individuals.

Furthermore, because the institution is based in the United States, the exposure of personal data could lead to significant legal consequences under various state laws and federal regulations. Beyond the legal and privacy concerns, the disclosure of sensitive corporate documents and financial records can result in substantial reputational damage and operational disruptions for the company. Within the agriculture and food production sector, such incidents can also highlight potential risks to supply chain security, as disruptions to a major distributor can have ripple effects throughout the regional food supply network.

To mitigate such risks, organizations in critical sectors like food production often focus on strengthening their defensive postures. This typically involves implementing robust data encryption, maintaining strict access controls, and conducting regular security audits. Additionally, maintaining comprehensive offline backups and developing a clear incident response plan are essential steps for managing the fallout of a potential breach and ensuring business continuity.