Susquehanna Glass targeted by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Manufacturing
• Announcement date: December 19, 2025

Akira ransomware group claims data breach at Susquehanna Glass

The Akira ransomware group has claimed responsibility for a data breach targeting Susquehanna Glass. According to an announcement posted on a leak site on December 19, 2025, the threat actors assert they have successfully exfiltrated 35 GB of data belonging to the organization. This claim follows a purported attack that occurred on December 2, 2025.

The threat group is reportedly employing a double-extortion strategy in this incident. In such scenarios, ransomware actors do not merely encrypt a victim's systems to disrupt operations; they also steal sensitive information to use as leverage. By threatening to publish the stolen data on public leak sites, the attackers aim to pressure the organization into paying a ransom to prevent the exposure of confidential information. The Akira group has indicated that the stolen data is slated for publication in the near future.

Details of the alleged data exfiltration

While the threat actor has not provided any screenshots to verify the legitimacy of the stolen files, the group has provided specific details regarding the nature of the compromised information. The claim suggests that the breach involves sensitive data belonging to approximately 800 individuals. This information is highly sensitive and could be used for various malicious purposes if released.

The data types allegedly included in the 35 GB exfiltration include:

• Employee personal data
• Passport information
• Driver's licenses
• Social Security Numbers (SSN)
• Financial records
• Customer information
• Drug test results

The inclusion of such highly regulated personal identifiers, such as Social Security Numbers and passport scans, significantly increases the severity of the alleged breach, as these elements are primary targets for identity theft and fraudulent activities.

About Susquehanna Glass

Susquehanna Glass is a family-owned business located in Pennsylvania. The company specializes in the design and manufacturing of various glass products. Operating under third-generation leadership, the organization produces a range of personalized glassware and decorative items.

Potential impact and security implications

The alleged breach poses significant risks to both employees and customers. The types of data claimed to be stolen—including financial records, government IDs, and personal identifiers—could place these individuals at a heightened risk of identity theft. For an organization based in the United States, a confirmed breach of this nature may trigger various legal obligations. Depending on the specific circumstances and the nature of the data, the company might face mandatory notification requirements under various state laws and federal regulations.

The Akira group is recognized as a Ransomware-as-a-Service (RaaS) entity. This business model allows developers to lease their ransomware code to affiliates, who then carry out the actual attacks. This group is known for frequently exploiting vulnerabilities in Virtual Private Networks (VPNs) to gain initial access to corporate networks. Once inside, they move laterally to locate and exfiltrate sensitive data.

For organizations in the manufacturing sector, such incidents can lead to significant operational disruptions, long-term reputational damage, and potential legal consequences. Furthermore, the publication of such detailed personal and financial information can create a foundation for highly targeted phishing attacks against the affected individuals. To defend against such threats, organizations typically focus on securing remote access points, implementing robust multi-factor authentication, and maintaining strict monitoring of data exfiltration patterns.