DDC Domus Design Collection Listed by akira Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
DDC Domus Design Collection was listed by the akira ransomware group on June 12, 2026, after internal files were exfiltrated in an attack whose timing is not established. An undisclosed number of people may have been affected; anyone connected to the organisation should check for notices and take protective steps.
On June 12, 2026, the Akira ransomware group listed DDC Domus Design Collection on its leak site. The number of individuals whose information may be involved remains unknown. The incident matters because the group states it holds internal corporate files that include employee records and client details, which could expose personal and financial information to misuse if released.
Inside the incident
The listing indicates that Akira claims to have carried out a ransomware operation against DDC Domus Design Collection and exfiltrated internal files. No confirmed count of records or files has been made public. The group stated it would upload 55 GB of data, describing contents that include detailed financials, employee personal information such as passports, addresses, phones and emails, credit card information, projects and client information. The exact timing of the intrusion and the method used have not been disclosed.
Who is akira?
Akira is a ransomware group that has conducted operations since at least early 2023. It typically employs double-extortion tactics, encrypting systems and threatening to publish stolen data unless a ransom is paid. The group has targeted organizations across multiple sectors and maintains a leak site where it posts claims about victims. Its listings represent assertions by the group rather than independently verified events.
DDC Domus Design Collection and its sector
DDC Domus Design Collection was founded in 1991 and is headquartered in New York City. The company manufactures and sells furniture. Organizations in this sector routinely maintain records on employees, suppliers, clients and financial transactions. A breach at such a firm can affect both staff and customers whose contact or payment details are stored in corporate systems.
What was likely exposed
The only confirmed detail is that internal files were allegedly exfiltrated. The Akira group claims the data includes detailed financial records, employee personal information such as passports, addresses, phone numbers and emails, credit card information, project files and client information. The precise contents of any released material remain unconfirmed, and the total number of individuals affected has not been stated.
The real-world impact
Exposed employee or client records can be used for identity theft, targeted phishing or financial fraud. Credit card details, if present, increase the risk of unauthorized transactions. For the organization, the incident may lead to operational disruption, regulatory scrutiny and costs associated with investigation and remediation. No public statements from DDC Domus Design Collection regarding confirmation or response have been recorded in available information.
Were you affected?
Individuals who have had contact with DDC Domus Design Collection as employees, clients or vendors should monitor their financial accounts and credit reports for unusual activity. Changing passwords for any associated accounts and enabling multi-factor authentication are standard precautions. Readers can run a free exposure scan of their email address against known breach data to check for prior appearances in public listings.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
Excalibur Rentals Listed by akira Ransomware GroupNtd Apparel Listed by akira Ransomware GroupOaks Park Listed by akira Ransomware GroupSid Harvey's Listed by akira Ransomware GroupLatest breaches
Publicly posted by akira — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.