Von Paris Moving listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: United States
• Sector: Transportation
• Announcement date: September 30, 2025

Akira ransomware group claims data breach at Von Paris Moving

The Akira ransomware group has officially listed data they claim belongs to Von Paris Moving on their dedicated leak site. According to the announcement made on September 30, 2025, the threat actors assert that they successfully obtained this information following a cyber incident that allegedly occurred on September 29, 2025. While the group has posted the claim online, no screenshots were provided to verify the contents of the alleged breach.

This development follows a pattern of behavior common among modern ransomware operations. The threat to publish sensitive information is a hallmark of the double extortion strategy. In such scenarios, attackers do not merely encrypt a victim's systems to disrupt operations; they also exfiltrate sensitive data to use as leverage. By threatening to release private information publicly, the group increases the pressure on the victim to meet ransom demands, using the fear of reputational damage and legal consequences as a primary motivator.

Details of the alleged data theft

The announcement made by the Akira group suggests that the stolen information is highly sensitive and covers multiple areas of the organization's operations. The group claims to have accessed a variety of files that could impact both the company's internal administration and its external relationships with clients and partners. The specific types of data mentioned in the claim include:

• Employee personal data (names, addresses, date of birth, and phone numbers)
• Financial records
• Client documents
• Contracts and agreements

The inclusion of such diverse data types—ranging from individual identity information to high-level business contracts—indicates a broad compromise of the organization's digital environment. The presence of personal identifiable information (PII) is particularly concerning as it can lead to secondary risks for the individuals involved, such as identity theft or targeted phishing campaigns.

About Von Paris Moving

Von Paris Moving is a Maryland-based moving company. The organization provides a variety of essential services within the transportation sector, including residential moving, storage, and logistics services. Given the nature of their business, which involves handling the personal belongings and sensitive documentation of clients during transitions, the organization manages a significant amount of private information.

Security implications and industry context

This incident highlights the growing risks faced by companies in the transportation and logistics sector. The alleged leak of financial and contractual data could potentially create negative impacts on the company's business operations and professional reputation. Furthermore, because the company is based in the United States, the incident may trigger state-level data protection laws and specific notification requirements regarding the exposure of personal information.

The Akira group, which has been an active Ransomware-as-a-Service (RaaS) operation since early 2023, is known for specific tactics. They frequently exploit vulnerabilities in VPN accounts to gain initial access to corporate networks. Once inside, they move laterally to identify and exfiltrate high-value data. This method of entry underscores the critical importance of securing remote access points and implementing multi-factor authentication to prevent unauthorized entry.

For organizations operating in similar sectors, this incident serves as a reminder of the multifaceted risks posed by double extortion. To mitigate these risks, companies often focus on robust data encryption, strict access controls, and continuous monitoring of network traffic for unusual patterns. Protecting against identity theft and secondary security risks requires a comprehensive approach to cybersecurity that extends beyond simple system recovery to include proactive data protection and incident response planning.