Taylor Clay Products listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: United States
• Sector: Manufacturing
• Announcement date: May 12, 2026

The Akira ransomware group has listed Taylor Clay Products on its dedicated leak site, claiming to have compromised a significant amount of corporate information. According to the announcement made on May 12, 2026, the threat actors claim to possess 72 GB of data belonging to the organization. While the group has not provided a ransom demand or a screenshot to verify the contents, they have indicated their intent to upload the dataset soon.

The claimed attack and event details

The incident involves a claim by the Akira group that they have successfully breached Taylor Clay Products, an American company. The threat actors stated that they have access to a dataset totaling 72 GB, which they intend to release. The announcement suggests that the breach may have occurred as early as October 7, 2025, though this date is based on the claims made by the attackers. The nature of the announcement is categorized as a data leak, signaling that the group intends to use the stolen information for extortion purposes.

Ransomware groups often utilize leak sites to pressure victims into paying ransoms. This process typically involves a period of negotiation where the attackers threaten to publish sensitive information if their demands are not met. In many cases, these groups employ a tactic known as double extortion. In a double extortion scheme, the attackers do not just encrypt the victim's systems to disrupt operations; they also steal sensitive data beforehand. This allows them to threaten the public release of the data, creating a secondary layer of pressure on the organization to comply with ransom demands.

Data types and information involved

The announcement made by the Akira group specifies several categories of sensitive information that are allegedly contained within the 72 GB dataset. The information claimed to be at risk includes both operational and personal data. According to the details provided by the threat actor, the following items are included in the alleged breach:

• Employee personal data
• Driver's licenses and other personal documents
• Contracts
• Client information
• Technical drawings and specifications

The inclusion of such diverse data types suggests a broad compromise of the organization's digital environment. While no specific screenshots were provided to confirm the presence of these files, the group's claim covers a wide spectrum of sensitive corporate and individual information.

About Taylor Clay Products

Taylor Clay Products is an American company that has been producing premium architectural brick, thin brick, and custom masonry solutions for architects and builders for over 75 years. The company offers a wide selection of colors, textures, and finishes, as well as custom blends tailored to specific projects.

Implications and organizational risks

This incident suggests that employees and clients of Taylor Clay Products may face significant risks related to identity theft due to the alleged exposure of personal documents and driver's licenses. Furthermore, the alleged exposure of contracts and technical drawings could lead to the disclosure of trade secrets, which may result in potential damage to the organization's competitive position in the manufacturing sector. Because the organization is based in the United States, this incident may trigger legal proceedings under relevant state laws and federal data protection regulations.

The use of double extortion tactics by the Akira group means that the publication of this data could create a foundation for secondary phishing attacks. In such scenarios, attackers use stolen contact information or specific details from contracts to craft highly convincing fraudulent communications. Additionally, the organization's supply chain partners may also be indirectly affected by this incident, as the exposure of client information and technical specifications can impact the security and privacy of interconnected business relationships.

For organizations in the manufacturing sector, maintaining robust cybersecurity defenses is essential to protect intellectual property and sensitive client data. Common defensive steps include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training to help employees recognize phishing attempts. Protecting the supply chain and ensuring compliance with data protection regulations are also critical components of a modern cybersecurity strategy.