Ransomware Group: AKIRA

VICTIM NAME: mipa[.]com[.]br

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the AKIRA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page, associated with the victim identified as mipa.com.br, is linked to the manufacturing sector in Brazil. The content of the leak appears to be derived from an internal document titled “Taking stock of 2024 Part 2,” indicating that sensitive information regarding the company’s future planning or operations may have been exposed. The leak was discovered on February 4, 2025, which aligns with the publication date, suggesting that the content was made publicly available shortly after being compromised. There is currently no information indicating any employees or third-party entities were directly involved in the leak.

This incident falls under the group named “akira”, which suggests a possible higher organization behind various ransomware activities. It is important to note the absence of download links or screenshots on the leak page, which could indicate either a limited dataset or a focus on textual information without additional graphical content. The activities linked to the victim highlight the ongoing risks facing manufacturing companies in Brazil, emphasizing the need for robust cybersecurity measures to protect sensitive information from such attacks.