Avelina Listed by akira Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On May 28, 2024, the ransomware group known as akira listed Avelina on its leak site, claiming to have conducted a ransomware attack against the company and to have exfiltrated internal files. Public reporting so far identifies the incident only through this listing; the number of people affected remains unknown, and independent confirmation of the full scope has not been published.

The claim matters because Avelina operates in the food-supply chain, handling relationships with retailers, food-service businesses and major food-industry companies. Any release of internal material could expose commercial and limited personal information tied to those relationships.

Inside the incident

According to the listing attributed to akira, the group carried out a ransomware attack on Avelina and exfiltrated internal files. The group states that 30 Gb of data will be released and describes the material as containing client and competitor information together with financial documents that include pieces of personal data. No further technical details—such as the initial access method, the precise date of intrusion, encryption status of systems, or whether a ransom demand was paid—have been disclosed in the available record. The number of individuals whose information may be involved is listed as unknown. The incident is therefore known publicly only through the group’s claim and the accompanying description of the data volume and categories.

Who is akira?

Akira is a ransomware operation that has been active since early 2023. Like many contemporary ransomware groups, it typically employs a double-extortion model: encrypting systems while also stealing data and threatening to publish it on a dedicated leak site if payment is not made. The group has previously listed victims across manufacturing, professional services and other sectors, often providing sample files or volume estimates to pressure organisations. Its leak-site postings are claims made by the actors themselves; they are not independently verified statements of fact unless corroborated by the victim or by forensic investigators. In this case the listing of Avelina follows the same pattern—an assertion of compromise and an announced intention to release data—without additional public confirmation.

About Avelina

Avelina supplies packaged products to retailers and the food-service industry and provides raw materials to major companies in the food sector. Organisations of this type sit at the intersection of manufacturing, logistics and wholesale distribution; they routinely maintain records of customers, suppliers, pricing, contracts and internal financial operations. Because the food-supply chain involves both commercial partners and, in some cases, regulatory or quality documentation, a breach can affect not only the company itself but also the businesses that rely on its products and materials. The precise size of Avelina’s workforce or customer base is not stated in the available reporting, yet the nature of its activities makes any unauthorised access to internal files potentially consequential for commercial confidentiality and limited personal data.

The information in question

The only description of the exposed material comes from the akira listing itself. The group claims to have taken 30 Gb of internal files and states that the release will include “much client and competitor information” as well as “financial docs with pieces of personal data.” No inventory of specific file types, no count of records, and no confirmation of exact data fields have been published by Avelina or by independent sources. Organisations operating in food packaging and raw-material supply typically hold customer lists, supplier contracts, pricing schedules, invoices, bank details and, in some cases, contact information for employees or business representatives. Whether any of those categories are present in the claimed 30 Gb archive remains unconfirmed beyond the group’s own wording. Readers should therefore treat the data description as an unverified claim rather than an established inventory.

What's at stake

If the claimed files are released, client and competitor information could reveal commercial terms, pricing or strategic relationships that competitors or opportunistic actors might exploit. Financial documents containing pieces of personal data raise the possibility that names, contact details or other identifiers of individuals connected to Avelina’s business partners could become public. For those individuals the practical risks include unwanted contact, targeted phishing that references genuine commercial relationships, or identity-related misuse if sufficient personal details are present. For Avelina the stakes include potential loss of customer trust, contractual disputes with partners whose information appears in the material, and the operational cost of investigating and containing the incident. Because the number of affected people is unknown and the exact contents remain unconfirmed, the scale of these risks cannot yet be quantified; the exposure is real but its precise boundaries are still limited by the available public detail.

Were you affected?

If you have done business with Avelina—as a retailer, food-service operator, supplier or employee—consider the possibility that limited personal or commercial information linked to that relationship could appear in the claimed data set. Practical first steps include monitoring financial accounts and email for unexpected activity, treating any unsolicited messages that reference Avelina or food-industry contracts with heightened caution, and changing passwords on accounts that may have been used in related correspondence. Because the full contents of the files have not been independently verified, it is not yet possible to say with certainty who is or is not included. Readers can run a free exposure scan of their email address to check whether that address has already surfaced in other known breach data sets; such a check provides an additional, independent signal while the Avelina matter remains incompletely documented.

AICompiled with AI assistance from public sources and published under our editorial standards.