DYNAMIS Insurance Listed by akira Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

People connected to DYNAMIS Insurance—policyholders, employees, or business partners—face practical questions about whether their personal, financial, or contractual details left the company’s systems. When an insurer appears on a ransomware group’s leak site, the immediate concern is not abstract cyber risk but the concrete possibility that names, payment information, or private agreements could be misused for fraud or identity theft.

On 25 April 2025 DYNAMIS Insurance, a Greek insurer, was listed by the akira ransomware group. The group claims it exfiltrated internal files during a ransomware attack and is prepared to publish them. The number of people affected remains unknown, and independent confirmation of the full scope is not yet public.

Inside the incident

Public reporting states that DYNAMIS Insurance was listed by the akira ransomware group on 25 April 2025. The group asserts that it carried out a ransomware attack in which internal files were exfiltrated. According to the listing, the group is ready to upload 25 GB of material it describes as essential corporate documents. The listing itself is a claim by the threat actor; no independent verification of the volume, completeness, or authenticity of the files has been published in the available facts. Timing of the intrusion, the precise method of initial access, and any ransom demand are undisclosed. The number of individuals whose data may be involved is also unknown.

Who is akira?

Akira is a ransomware group that has operated since early 2023 and is known for double-extortion tactics: encrypting systems while simultaneously stealing data and threatening to publish it on a dedicated leak site if payment is not made. The group typically targets mid-sized organisations across multiple sectors, including professional services and finance-related firms, and has listed numerous victims publicly. Its operations often involve the theft of corporate documents, employee records, and client information before encryption. In this case the group’s leak-site listing of DYNAMIS Insurance constitutes an unverified claim; nothing in the public facts states that the group’s statements about the volume or content of the files have been independently validated.

Who is DYNAMIS Insurance?

DYNAMIS Insurance is a Greek insurance company that offers a wide range of insurance products and emphasises solid backing together with the confidence of personal contact. Like most insurers, it necessarily processes and stores personal data of clients and employees, policy details, payment records, and commercial contracts. A breach at such an organisation is consequential because insurance firms sit at the intersection of sensitive personal information and financial data; any unauthorised removal of those records can expose individuals to fraud and can disrupt the company’s ability to serve policyholders and meet regulatory obligations.

What was likely exposed

The available facts state that internal files were exfiltrated in a ransomware attack. The akira group claims the material includes personal information of employees, information of clients, financial data (audits, payment details, reports, credit-card details), corporate NDAs, and numerous contracts and agreements. These categories are presented solely as the group’s assertion. Exact contents, file counts, and whether any particular individual’s data is present remain unconfirmed. Organisations of this type routinely hold precisely the kinds of records the group describes—identity documents, bank or card details, policy schedules, and commercial agreements—yet public detail does not establish which of those records, if any, were actually taken.

The real-world impact

For individuals, the principal risks are identity theft, financial fraud, and targeted phishing that leverages genuine personal or policy details. Credit-card information or payment records, if present, could be used for unauthorised transactions; employee data could enable social-engineering attacks against the company or its staff. For DYNAMIS Insurance the consequences include potential regulatory scrutiny under data-protection rules, operational disruption while systems are restored, and reputational damage that may affect client confidence. Because the number of people affected is unknown and the precise data set is unconfirmed, the scale of these risks cannot yet be quantified. Affected parties may face months of monitoring rather than immediate, visible harm.

Were you affected?

If you are a current or former client, employee, or partner of DYNAMIS Insurance, treat the listing as a prompt for caution rather than proof of personal exposure. Monitor bank and credit-card statements for unfamiliar activity, place fraud alerts with credit bureaux where available, and be wary of unsolicited messages that reference insurance policies or personal details. Change passwords on any accounts that reuse credentials associated with the company, and enable multi-factor authentication where possible. Readers can also run a free exposure scan of their email address to check whether that address has already appeared in known breach data sets; such a scan provides an additional early-warning signal while official notifications, if any, are awaited.

AICompiled with AI assistance from public sources and published under our editorial standards.