Custom Engineered Wheels Listed by akira Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On December 3, 2025, the Akira ransomware group listed Custom Engineered Wheels on its leak site, claiming to have stolen internal corporate data from the company. The number of individuals affected remains unknown, and no independent confirmation of the data volume or contents has been made public. This listing occurs amid a broader pattern of ransomware operations that continue to focus on mid-sized manufacturers and industrial suppliers, where operational data and personal records often coexist on shared systems.

Inside the incident

The incident involves the exfiltration of internal files during a ransomware attack on Custom Engineered Wheels. Public reporting is limited to the group’s listing, which states an intent to upload 65 GB of data. No official statement from the company, law-enforcement notification, or independent forensic details have been released. Timing of the intrusion, encryption status, or any ransom demand remains undisclosed.

Inside akira

Akira is a ransomware operation that first appeared in early 2023 and has since conducted intrusions against organizations in multiple countries. The group typically employs double-extortion tactics, encrypting systems while also copying data for later publication or sale. Its listings frequently describe categories of files such as employee records, financial documents, and contracts. The group’s claims about any specific victim are treated as unverified until corroborated by the affected organization or investigators.

Custom Engineered Wheels and its sector

Custom Engineered Wheels, also referred to as CEW Inc., produces custom injection-molded polyurethane foam products, including industrial wheels, medical mobility components, and parts for bicycles and recreational vehicles. Companies of this type routinely maintain records related to production processes, supplier agreements, customer specifications, and personnel administration. A compromise in this sector can affect both business continuity and the privacy of employees and clients whose information is stored alongside operational files.

The information in question

The Akira listing claims the exfiltrated material includes detailed employee information such as dates of birth, phone numbers, addresses, and document scans, along with agreements, contracts, financial records, client information, and nondisclosure agreements. The precise scope and format of any files have not been independently verified. Organizations in manufacturing commonly store these categories of data, but the exact contents held by Custom Engineered Wheels remain unconfirmed beyond the group’s assertions.

What's at stake

Exposure of employee personal details can lead to targeted phishing, identity theft, or harassment. Release of contracts, financials, and client records may create commercial disadvantages or compliance obligations under applicable privacy regulations. For the organization, the incident adds costs related to investigation, potential regulatory scrutiny, and restoration of systems, regardless of whether data is ultimately published.

Were you affected?

Individuals who have worked with or done business with Custom Engineered Wheels should monitor their financial accounts and credit reports for unusual activity. Changing passwords for any associated services and enabling multi-factor authentication where available are standard first steps. Readers may also run a free exposure scan of their email address against known breach datasets to check for prior appearances of their information.

AICompiled with AI assistance from public sources and published under our editorial standards.