Ransomware Group: AKIRA

VICTIM NAME: saludsa[.]com[.]ec

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the AKIRA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak associated with the healthcare organization identified by the domain “saludsa.com.ec” was disclosed on February 4, 2025. This incident falls under the cybercriminal group known as “akira.” The extracted information indicates that the organization has a total of 106 users, with 22 of those users having accessible URLs. In addition, it is noted that the organization collaborates with 81 third parties, which entails a significant number of stakeholders involved in its operations. The overall workforce of the entity comprises 16 employees, which presents a small yet critical operational structure in the healthcare sector.

The reported data extraction encompasses a variety of sensitive information associated with the health service provider. The details extracted suggest potential vulnerabilities in their data management practices, leading to this breach. The description embedded within the leak indicates a focus on “Taking stock of 2024 Part 2,” hinting at possible strategic planning documents or insights. While no specific screenshots or images are available for public review, the sheer volume of third-party connections elevates concerns about the broader impact this leak could have on data security across interconnected entities in the healthcare domain.