Zurflüh-Feller targeted by Akira ransomware group

• Ransomware group: Akira
• Country: France
• Sector: Manufacturing
• Announcement date: February 2, 2026

Akira ransomware group claims data breach at Zurflüh-Feller

The Akira ransomware group has listed the French manufacturing company Zurflüh-Feller on its leak site, claiming to have exfiltrated a significant amount of corporate data. According to the announcement made on February 2, 2026, the threat actors claim the incident occurred on the same day. The group has indicated that the stolen information is scheduled to be published on their platform in the near future.

This type of activity is characteristic of modern ransomware operations, specifically those employing a double extortion tactic. In such scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also steal sensitive information to use as leverage. By threatening to leak confidential data on a public leak site, the threat actors aim to pressure the victim into paying a ransom to prevent the exposure of sensitive corporate and personal information.

Details of the alleged data theft

The Akira group claims to have acquired approximately 66 GB of data belonging to Zurflüh-Feller. While the group has posted the listing on their leak site, they have not provided any screenshots to verify the contents of the stolen files. The announcement suggests a broad scope of data theft, targeting various aspects of the company's internal operations and personnel records.

The data allegedly stolen by the attackers includes a variety of sensitive documents, such as:

• Employee passports
• Employee identification cards
• Financial records
• Contracts
• Non-disclosure agreements

The exposure of such diverse datasets, ranging from high-level financial documentation to individual identification documents, presents a multifaceted challenge for the targeted organization.

About Zurflüh-Feller

Zurflüh-Feller is a French company with a long history in the manufacturing sector, having been in operation since 1920. The organization specializes in the design and production of shutter mechanisms and related technical components. They are a known provider of components used for roller shutters and various building closure solutions.

Potential impact and security implications

The alleged leak of this specific data carries significant risks. The inclusion of employee passports and identification cards creates a high risk of identity theft for the individuals involved. Furthermore, the disclosure of detailed financial records and contracts could potentially impact the company's commercial operations and its various business partnerships. Because the company operates within the European Union, such an incident may trigger mandatory data breach notification requirements and potential administrative sanctions under the General Data Protection Regulation (GDPR).

From a security perspective, the Akira group is known to target vulnerabilities in Virtual Private Networks (VPNs) to gain initial access to networks. This suggests that security weaknesses may exist within the company's network infrastructure. The potential publication of this data could jeopardize both corporate confidentiality and the security of the company's broader supply chain.

For organizations operating in the manufacturing sector, maintaining robust security postures is critical. Common defensive steps to mitigate such risks include implementing multi-factor authentication (MFA) across all remote access points, such as VPNs, and ensuring that all network infrastructure is regularly patched against known vulnerabilities. Additionally, maintaining strict data segmentation and implementing comprehensive monitoring can help detect unauthorized data exfiltration attempts before they reach a critical scale.