Superior Forge & Steel listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: United States
• Sector: Manufacturing
• Announcement date: March 28, 2025

Akira ransomware group claims data breach at Superior Forge & Steel

The Akira ransomware group has claimed responsibility for a data breach targeting Superior Forge & Steel, a manufacturing firm based in the United States. According to an announcement made on the group's leak site on March 28, 2025, the threat actors claim to have exfiltrated a significant volume of corporate information from the organization.

The incident was officially announced on March 28, 2025, which coincides with the date the group claims the attack took place. While the group has published a listing for the company, they have not provided any screenshots to verify the contents of the alleged breach, nor have they specified a ransom demand or a specific file count. The group claims to have obtained over 22 GB of data, which they assert consists of various corporate documents.

Details of the alleged data exfiltration

The Akira group claims to have accessed a wide array of sensitive information during their operation. The data allegedly stolen from Superior Forge & Steel includes various types of internal and personal documentation. Based on the group's claims, the following types of information have been compromised:

• Non-disclosure agreements
• Medical documents
• Internal corporate correspondence
• HR documents
• Employee contact information
• Customer contact information
• Financial data, including audits, payment details, and reports

The Akira group is recognized as a Ransomware-as-a-Service (RaaS) operation that first emerged in early 2023. The group is known for employing double extortion tactics, a method where attackers not only encrypt an organization's systems but also steal sensitive data to use as leverage. They are known to target various environments, including Windows, Linux, and virtualization platforms. In double extortion schemes, the threat actors threaten to leak the stolen data on public forums if the ransom is not paid, increasing the pressure on the victim.

About Superior Forge & Steel

Superior Forge & Steel is an integrated alloy steel manufacturer. The company specializes in the production of forged and hardened rolls designed for the hot and cold rolling of both ferrous and non-ferrous metals. Their operations are comprehensive, managing the entire production lifecycle from the initial selection of scrap for melting to the final finishing stages of the products.

Potential impact and industry implications

The exposure of this data poses several secondary risks to both the organization and the individuals involved. For the employees and customers of Superior Forge & Steel, the theft of contact information and medical documents could lead to identity theft and highly targeted phishing attacks. Such attacks often exploit the specific details found in stolen correspondence to gain further trust from the victim.

Furthermore, the release of corporate data can lead to significant damage to a company's commercial reputation. For a manufacturer operating within the United States, such a breach may also trigger legal proceedings under various state laws and data protection regulations. There is also the possibility that the leaked data could be shared with a wider audience in the future, given the known methods of the Akira group.

In the manufacturing sector, such incidents can have a ripple effect through the supply chain. Partners and suppliers of the organization could be indirectly affected and may find themselves vulnerable to similar targeted attacks. Organizations in this sector often focus on securing their industrial control systems and protecting sensitive intellectual property and customer data to mitigate these types of cascading risks.