Ransomware Group: AKIRA

VICTIM NAME: rqsi[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the AKIRA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The dark web leak page for the victim, identified as rqsi.com, reveals that the organization operates in the Financial Services sector and is based in the United States. The summary indicates that the data was discovered on January 31, 2025, and covers various aspects of their operations, with a focus on a report titled “Taking stock of 2024 Part 1”. This document likely contains critical insights into the company’s financial analysis or projections for the upcoming year, although specific details concerning the content of the report have not been disclosed on the leak page.

As part of the ransomware group “akira”, the page does not indicate any exposed employee or third-party information, suggesting that the breach may have more significant implications for the firm’s operational data rather than personal data of individuals associated with the company. It is essential for institutions in the Financial Services sector to remain vigilant against ransomware attacks, as this may represent a growing trend in the targeting of financial entities. The absence of screenshots or direct download links on the leak page means that specific pieces of leaked data have not been made public at this time, although the potential for future disclosures remains.