Studio Libeskind targeted by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Professional Services
• Announcement date: May 1, 2024

The Akira ransomware group has claimed responsibility for a data breach involving the international architecture and design firm, Studio Libeskind. According to an announcement made on the group's leak site on May 1, 2024, the threat actors claim to have exfiltrated a significant amount of sensitive information belonging to the organization.

The claimed attack and event details

The Akira ransomware group has listed approximately 18 GB of data on their leak site, which they claim belongs to Studio Libeskind. The group has stated that the attack occurred on April 30, 2024. According to the group's announcement, they intend to release various types of information, including architectural project details, accounting files, and personal documents.

It is important to note that the group did not provide any screenshots to support their claims in the announcement. The listing currently serves as a claim by the threat actors regarding the stolen data. While the group has identified the volume of data, they have not provided information regarding a specific ransom demand.

The data allegedly involved in the leak

The announcement made by the Akira group claims that the stolen data includes a variety of sensitive documents. The information allegedly contained in the leak includes joint project information, accounting files, passports, contracts, and various agreements. The specific types of data mentioned in the claim are:

• Passports
• Accounting records
• Contracts
• Project information

As previously noted, no visual evidence or screenshots were provided by the group to verify the contents of the alleged breach.

About Studio Libeskind

Studio Libeskind is an international architecture and design firm founded by Daniel Libeskind. The firm is recognized for its world-renowned projects and provides architectural design services across a wide range of sectors. Their professional portfolio includes work in the cultural, commercial, and residential sectors.

Risk assessment and implications

This claim may pose significant risks to the organization's operational continuity and data privacy. The alleged leak of sensitive documents, such as passports and contracts, could lead to identity theft or targeted phishing attacks against employees and business partners. Because the organization is a US-based entity, it may face data breach notification obligations under relevant state laws and federal regulations.

Given the double-extortion tactics frequently employed by the Akira group, the publication of this data could damage the firm's commercial reputation and lead to the exposure of confidential project details. Double extortion is a common ransomware tactic where attackers not only encrypt an organization's data but also steal it, threatening to leak it publicly unless a ransom is paid. This adds a layer of pressure beyond mere operational disruption.

In general, organizations facing such threats often focus on defensive strategies such as implementing multi-factor authentication, maintaining offline backups, and conducting regular security awareness training to prevent phishing. Information regarding the Akira group remains limited.