Texollini listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: United States
• Sector: Manufacturing
• Announcement date: March 18, 2026

Akira ransomware group claims attack on Texollini

The Akira ransomware group has listed the United States-based textile manufacturer Texollini on its dedicated leak site. According to the announcement made on March 18, 2026, the threat actors claim to have targeted the organization and are asserting possession of significant amounts of corporate information. This listing follows a claimed attack date of February 18, 2025.

The Akira group is characterized as a Ransomware-as-a-Service (RaaS) operation that first emerged in early 2023. This type of cybercriminal model involves developers providing ransomware tools to affiliates who then carry out the actual attacks. The group is known for employing double extortion tactics, a method where attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive data to threaten its public release unless a ransom is paid. This dual-pressure approach significantly increases the impact of the attack on the victim organization.

The threat actors have stated that they intend to upload 20 GB of corporate data to their leak site in the near future. While the group has made this claim, no screenshot has been provided to verify the contents of the stolen files, and no specific ransom demand has been disclosed in the announcement.

Alleged data contents and affected information

The information allegedly compromised in this incident is highly sensitive, potentially involving a wide range of personal and corporate documentation. The threat actors claim to have access to various types of files that could pose significant risks to both the company and the individuals involved. The specific categories of data mentioned in the claim include:

• Employee passports
• Driver's licenses
• Medical records
• HR forms
• Financial files
• Client files
• Contracts
• NDAs

The presence of such diverse data types suggests a broad compromise of the organization's internal databases and administrative systems. The inclusion of identity documents and medical records, in particular, highlights the potential severity of the breach regarding personal privacy.

About Texollini

Texollini is a textile manufacturer located in the United States. The company operates at the intersection of fashion and technology, focusing on the creation of innovative materials and advanced performance textiles. Their product portfolio is diverse, catering to several different markets through a wide range of offerings, including items for activewear, swimwear, and intimate apparel.

Risk assessment and potential implications

The claim made by the Akira group carries significant implications for Texollini. The nature of the data mentioned—including identity documents and medical records—may increase the risk of identity theft and fraud for the organization's employees and customers. Because the organization is based in the United States, the potential exposure of such sensitive information may lead to legal obligations under HIPAA or other relevant state-level data protection laws.

Beyond the immediate impact on individuals, the organization may face secondary risks. The leaked data could be utilized in highly targeted phishing attacks, where attackers use specific personal details to gain trust. Furthermore, there is a potential for exposure regarding the organization's supply chain partners, which could disrupt broader business relationships. The sensitivity of the information involved could lead to lasting reputational damage and significant disruptions to the organization's operational processes.

The group's known tendency to exploit vulnerabilities in Virtual Private Networks (VPNs) suggests that organizations facing similar threats may need to re-evaluate their network security processes. For companies in the manufacturing sector, maintaining robust security protocols is essential to protect intellectual property and sensitive client data. Defensive strategies often involve implementing multi-factor authentication, maintaining rigorous patch management for all remote access points, and ensuring comprehensive monitoring of network environments to detect unauthorized access early.