TigerPress (DCC) targeted by Akira ransomware group

• Ransomware group: Akira
• Country: United States
• Announcement date: October 9, 2026

Akira ransomware group claims data breach at TigerPress (DCC)

The Akira ransomware group has listed TigerPress (DCC) on its dedicated leak site, claiming to have successfully compromised the organization. According to the announcement made on October 9, 2026, the threat actor group asserts that they have gained access to corporate data belonging to the entity. The group has declared its intention to publish a dataset totaling 9 GB, which they claim contains sensitive corporate information.

Ransomware leak sites are platforms used by cybercriminal groups to exert pressure on victims. These sites often host lists of compromised organizations and, in many cases, provide previews or full downloads of stolen data to shame the victim into paying a ransom. This practice is a central component of modern cyber extortion campaigns.

Details of the claimed data theft

While no screenshots were provided to verify the contents of the breach, the Akira group has made specific claims regarding the nature of the information they have allegedly exfiltrated. The group states that the 9 GB dataset is expected to be released soon and contains various types of sensitive information. The announcement alleges that the stolen data includes:

• Employee personal information
• Client personal information
• Project files

The group has not provided information regarding a specific ransom demand or the exact method of entry used during this specific incident. However, the claim of possessing such a large volume of data highlights the potential impact of the breach on the organization's operations and privacy obligations.

About TigerPress (DCC)

TigerPress (DCC) is a full-service printing and packaging provider with a significant operational presence in the United States. The company operates across several key regions, including New Jersey, New York, and Massachusetts. They offer a wide range of printing solutions, including offset, digital, and large-format options.

The organization serves a diverse array of industries, providing essential services to sectors such as pharmaceuticals, beauty, retail, and consumer goods. Given its role in the supply chain for these industries, the company handles various sensitive project files and client-related data necessary for its printing and packaging operations.

Analysis and potential risks

The situation involving TigerPress (DCC) underscores the evolving risks associated with double-extortion tactics. In a double-extortion scenario, attackers do not just encrypt a victim's systems; they also steal sensitive data and threaten to leak it publicly unless a ransom is paid. This tactic significantly increases the pressure on an organization, as the threat of data exposure can lead to severe consequences even if the company can restore its systems from backups.

The potential publication of the claimed data poses several critical risks. For the employees and clients whose personal information is allegedly stolen, there is a heightened risk of identity theft and targeted phishing attacks. Furthermore, the organization may face legal repercussions under data protection regulations in the regions where it operates, such as various US state laws. There is also the secondary risk that the leaked data could be leveraged to launch supply chain attacks against the company's partners or clients.

The Akira group has shown a tendency to exploit vulnerabilities in Virtual Private Networks (VPNs), which may suggest that weaknesses in an organization's network security processes could be a primary vector for such attacks. For organizations in the printing and packaging sector, maintaining robust security protocols is vital to protect commercial reputation and client trust. Common defensive measures include implementing multi-factor authentication, ensuring all remote access points like VPNs are fully patched, and maintaining strict monitoring of network traffic to detect unauthorized data exfiltration.