Skip to content
Ransomware

Tenryu America listed on Akira ransomware leak site

Manufacturing company Tenryu America has been listed on the Akira ransomware group's leak site. The group claims to have obtained various corporate documents from the organization.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: Akira
  • Country: United States
  • Sector: Manufacturing
  • Announcement date: October 17, 2025

Akira ransomware group targets Tenryu America

The manufacturing company Tenryu America has been listed on the leak site of the Akira ransomware group. According to the announcement made by the threat actors, the group claims to have successfully infiltrated the organization's network and obtained various corporate documents. This listing, which appeared on October 17, 2025, serves as a notification of the alleged breach and a threat to publish the stolen information.

The Akira group is known for employing a double-extortion method, a tactic where attackers not only encrypt a victim's systems but also steal sensitive data to use as leverage. By threatening to release this data publicly, the group aims to pressure the organization into paying a ransom. While the group has claimed to have obtained data from the organization's network, it is important to note that no screenshots have been provided by the attackers to visually verify the scope or the specific content of the alleged leak.

Claims regarding stolen data

The announcement made by the Akira group claims that the stolen information includes a variety of sensitive documents. According to the group's claims, the data involves several categories of information that could impact both the company and its stakeholders. The specific types of data mentioned in the claim include:

  • Employee personal data (such as dates of birth, addresses, and phone numbers)
  • Client data
  • Financial records
  • Contracts and non-disclosure agreements (NDAs)

Despite these claims, the group has not provided any visual evidence, such as screenshots, to substantiate the presence of these files on their servers. Furthermore, no specific information regarding the total volume of data stolen or the exact number of files involved has been disclosed in the announcement.

About Tenryu America

Tenryu America is a specialized manufacturing company operating within the industrial sector. The company is a producer of high-quality carbide saw blades designed for a wide range of industrial applications. Their product line serves various fields, including woodworking, metalworking, and plastic cutting. To meet diverse industrial requirements, the company offers an extensive catalog consisting of over 3,000 different types of saw blades.

Potential impact and industry implications

The alleged breach at Tenryu America carries significant risks. The exposure of employee personal information, such as addresses and phone numbers, can increase the risk of identity theft or targeted phishing attacks directed at the workforce. Similarly, the potential leak of client data and financial records could compromise sensitive business relationships and operational integrity.

For a manufacturing organization, the publication of corporate data can lead to the compromise of trade secrets and proprietary operational processes. This type of incident often triggers legal and regulatory consequences. Under United States regulations, such a breach may necessitate formal data breach notifications and could lead to potential legal sanctions. The impact of such an event can also extend to the organization's reputation, especially when dealing with the double-extortion tactics favored by groups like Akira.

While information regarding the specific tactics of the Akira group remains limited, they are known to frequently exploit vulnerabilities in VPNs to gain initial access to networks. To defend against such threats, organizations in the manufacturing sector often focus on securing remote access points, implementing multi-factor authentication, and maintaining robust monitoring of network traffic to detect unauthorized access early.

From the Essential plan

Third-Party Risk

Monitor leaks on your suppliers’ domains and identify at-risk suppliers at an early stage.

Related stories