The Ely Company, Inc. targeted by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Sector: Manufacturing
• Announcement date: March 19, 2025

Akira ransomware group claims data breach at The Ely Company, Inc.

The Akira ransomware group has listed The Ely Company, Inc. on its leak site, claiming to possess 14 GB of corporate data. This announcement, which surfaced on March 19, 2025, indicates a significant potential exposure of sensitive information belonging to the American manufacturing firm.

Details of the alleged attack

According to the announcement published by the Akira group, the group claims to have obtained data belonging to The Ely Company, Inc. on March 14, 2025. The group alleges that the stolen data amounts to 14 GB and contains various corporate documents. The threat actors have stated that they intend to release these files publicly if their demands are not met.

Ransomware groups often utilize leak sites to exert pressure on victims through a tactic known as double extortion. In this scenario, attackers do not just encrypt a company's systems to disrupt operations; they also exfiltrate sensitive data before the encryption occurs. By threatening to publish this data on public forums or specialized leak sites, the attackers aim to damage the victim's reputation and force a ransom payment to prevent the disclosure of confidential information.

Scope of the alleged data theft

While no screenshots have been provided to verify the contents of the breach, the group claims that the leaked data includes a wide variety of sensitive materials. The alleged contents involve both corporate and personal information, which could have significant implications for the company and its stakeholders.

The data types allegedly involved in this incident include:

• Financial data
• Corporate licenses
• Agreements
• Healthcare documents
• SSN
• Contact information

The inclusion of Social Security Numbers (SSNs) and contact details suggests that the breach may impact individuals directly, moving beyond mere corporate espionage into the realm of identity theft risks.

The Ely Company, Inc. profile

The Ely Company, Inc. is an American company with over 50 years of experience in the manufacturing and production of quality machine parts for the commercial and aerospace industries.

Potential impact and organizational risks

The alleged data breach may increase the risk of identity theft and fraud for the company's employees and customers. Given that the company is based in the United States, the incident may lead to legal consequences under state and federal privacy regulations. Such regulatory scrutiny often follows breaches involving sensitive personal identifiers like SSNs.

The double-extortion tactics employed by the Akira group could result in significant reputational damage and trigger supply chain risks if the data is published. For companies operating in the manufacturing and aerospace sectors, the integrity of their data and the security of their digital infrastructure are critical to maintaining trust with high-stakes commercial and aerospace clients.

Considering the group's known history of exploiting VPN vulnerabilities, it is possible that security gaps existed within the organization's network infrastructure. To defend against such threats, organizations in the manufacturing sector often focus on securing remote access points, implementing multi-factor authentication, and maintaining rigorous patch management protocols to close known vulnerabilities.