Ransomware Group: AKIRA

VICTIM NAME: National AirVibrator

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the AKIRA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page associated with the victim, a company operating within the Transportation and Logistics sector in the United States, contains a significant repository of internal corporate documents. Notably, the leak boasts over 40 GB of sensitive data, including non-disclosure agreements (NDAs), financial documents, and contact information linked to employees and customers. Additionally, the leaked content comprises an array of personal information, notably driver licenses, further highlighting the serious implications of the data breach. The description underscores the use of vibratory equipment in various industrial processes, showcasing the victim’s operational focus on facilitating the flow of bulk materials.

The leak page provides instructions for users to download the compromised data easily through torrent clients such as Vuze, uTorrent, or qBittorrent. Users are guided to either open a torrent file or utilize provided magnet links to obtain the data without needing a password for the archived contents. This facilitated access raises concerns regarding the security and privacy of the victim’s sensitive information. This leak not only poses threats to the organization’s operational integrity but also potentially endangers the privacy of affiliated individuals due to the nature of the leaked content. The compromise’s discovery date is marked as February 25, 2025, indicating a further timeline in which this information may have been vulnerable.