Engineered Profiles Listed by akira Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

People whose personal or work-related information may have been taken in a ransomware incident involving Engineered Profiles face practical risks that can last for years. Employee records, customer details and internal business files, if exposed, can be used for identity fraud, targeted phishing or competitive harm. Public reporting places the listing of this company on a ransomware leak site in September 2025, yet the exact number of individuals affected remains unknown and the full contents of any stolen data have not been independently verified.

What is known so far comes largely from the claim published by the group that listed the organisation. That claim, combined with the nature of the company’s work, is enough to warrant careful attention from anyone who has worked for, supplied or done business with Engineered Profiles.

Inside the incident

On or around 11 September 2025, Engineered Profiles appeared on a leak site operated by the ransomware group known as akira. The listing stated that the group had exfiltrated internal files during a ransomware attack and was prepared to publish more than 56 GB of corporate documents. The group’s own description of the material included employee information such as social-security cards, driver licences, medical information, addresses and phone numbers, as well as project files, customer information, accounting records, confidentiality agreements and non-disclosure agreements.

No independent confirmation of the volume, the precise date of intrusion, or the method of initial access has been made public. The number of people whose data may be involved is listed as unknown. Public detail beyond the group’s claim and the basic identification of the victim organisation is therefore limited.

The group behind it: akira

Akira is a ransomware operation that has been active since early 2023. Like many contemporary groups, it typically employs a double-extortion model: encrypting systems while also stealing data and threatening to publish it if a ransom is not paid. The group has previously targeted organisations across manufacturing, professional services and other sectors, often listing victims on a dedicated leak site and releasing sample files or larger archives when negotiations fail.

In this case the group claims it is ready to upload more than 56 GB of Engineered Profiles material. That assertion remains an unverified claim; no public forensic report has confirmed the size or the full contents of any archive. Akira’s established pattern is to pressure victims by demonstrating possession of sensitive files, then either sell access, leak the data or both.

Engineered Profiles and its sector

Engineered Profiles specialises in high-quality plastic extrusion, design and advanced manufacturing technologies. Companies in this sector produce custom plastic profiles and components used in construction, industrial equipment, consumer products and other applications. Their day-to-day operations generate substantial volumes of technical drawings, customer specifications, supplier contracts, quality-control records and internal financial data.

Because the work is often project-based and involves long-term commercial relationships, such firms also hold detailed employee records, customer contact lists and confidentiality agreements. A breach at a manufacturer of this type can therefore affect both the workforce and the broader supply chain that relies on the company’s products and designs.

What data was at risk

The only named description of exposed material comes from the group’s own listing: internal files said to include employee information (social-security cards, driver licences, medical information, addresses, phones and similar records), projects, customer information, accounting documents, confidentiality agreements and NDAs. The group further claimed the total volume exceeded 56 GB.

These details have not been independently verified. Organisations engaged in plastic extrusion and advanced manufacturing typically retain precisely the categories of data the group listed—personnel files, design files, customer orders and financial records—but the exact contents of any archive allegedly taken from Engineered Profiles remain unconfirmed. Public reporting does not identify specific individuals or quantify how many records of each type may be involved.

The real-world impact

For employees, the presence of identity documents and medical information raises the possibility of identity theft, fraudulent account openings or medical-identity misuse. Customer and project data, if authentic, could be used by competitors or by fraudsters impersonating the company. Accounting records and NDAs may expose pricing, margins or contractual terms that damage commercial relationships.

For the organisation itself, the incident creates operational, legal and reputational costs. Even if systems are restored, the company must assess notification obligations, support affected individuals and review how the intrusion occurred. Because the number of people affected is unknown, the full scale of those obligations cannot yet be measured. The practical risk is therefore ongoing rather than confined to a single day of disruption.

Were you affected?

Anyone who has been employed by, contracted with or supplied Engineered Profiles should treat the possibility of exposure seriously. Monitor bank and credit accounts for unexpected activity, place fraud alerts if identity documents may be involved, and be alert to phishing messages that reference the company or its projects. Change passwords used on any work-related systems and enable multi-factor authentication wherever available.

Readers can also run a free exposure scan of their email address to check whether that address has already appeared in known breach data sets. Such a scan does not prove or disprove involvement in this specific incident, but it provides a practical starting point for personal monitoring while official notifications, if any, are still pending.

AICompiled with AI assistance from public sources and published under our editorial standards.