Fuller Metric Parts Listed by akira Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On 3 April 2025, the ransomware group known as akira listed Fuller Metric Parts on its leak site, claiming to have stolen internal corporate files. The number of people affected remains unknown, and independent confirmation of the full scope is not publicly available. For employees, customers and business partners whose contact details or other records may sit inside those files, the practical stakes are straightforward: personal and financial information could be misused for fraud, phishing or identity-related harm if the material is released or sold.

Public detail is limited to the group's own statements and the basic fact of the listing. No official confirmation of the volume, exact contents or method of intrusion has been issued by the company in the material available here. That uncertainty itself is part of the risk: people cannot yet know with certainty whether their data is involved.

What happened

According to the reported listing dated 3 April 2025, akira claims to have conducted a ransomware attack against Fuller Metric Parts (also referred to in the claim as Fuller Fasteners) and to have exfiltrated internal files. The group states it is prepared to upload more than 8 GB of material. The number of individuals affected is listed as unknown. Timing of the initial intrusion, the precise technical method used, and any ransom demand or payment status are not disclosed in the available facts. The listing itself is an unverified claim by the group; it has not been independently confirmed in the material provided.

Who is akira?

Akira is a well-documented ransomware operation that emerged publicly in 2023 and has since targeted organisations across multiple sectors, particularly in North America and Europe. The group typically employs a double-extortion model: encrypting systems while also stealing data and threatening to publish it on a dedicated leak site if payment is not made. Public reporting has associated akira with the use of compromised credentials, exploitation of remote-access services, and rapid data exfiltration followed by encryption. The group maintains a Tor-based site where it posts victim names and sample files to increase pressure. These tactics are established from prior public incidents; nothing in the present facts indicates unique claims by akira about Fuller Metric Parts beyond the listing and the stated intention to release the described documents.

Who is Fuller Metric Parts?

Fuller Metric Parts is a long-established supplier of metric and inch fasteners. According to the information accompanying the listing, the business has operated since 1976 and maintains warehouses in Surrey, British Columbia; Mississauga, Ontario; and Shanghai. Organisations of this type typically hold employee records, customer contact lists, supplier agreements, financial statements, payment details and internal correspondence necessary to run multi-location inventory and sales operations. A breach involving such a company is consequential because the data often includes both personal identifiers of staff and commercial information that can be used for targeted fraud or competitive intelligence. The company itself has not been shown in the available facts to have confirmed or denied the incident.

What was likely exposed

The facts state that internal files were exfiltrated in a ransomware attack. The group claims the material exceeds 8 GB and includes HR documents, financial data (audits, payment details, reports), contact numbers and e-mail addresses of employees and customers, and internal corporate correspondence. Exact contents and whether any of this material has actually been published remain unconfirmed. Organisations in the industrial-supply sector commonly store precisely these categories of records; however, without independent verification it is not possible to state as fact which specific files or individuals are involved.

Why it matters

If the claimed data is accurate and released, employees face risks of phishing, identity theft or unsolicited contact based on leaked personal details. Customers and suppliers whose e-mail addresses or payment information appear could receive fraudulent invoices or social-engineering attempts that reference genuine business relationships. For the organisation, publication of financial audits, payment details and internal correspondence can damage commercial relationships and create regulatory or contractual exposure. Because the number of people affected is unknown, the full scale of potential harm cannot yet be measured. The absence of confirmed containment or notification details leaves affected parties without clear guidance on next steps from the company itself.

If your data was in this claimed breach

Until more information is released, treat any unexpected contact that references Fuller Metric Parts or related fastener business as potentially suspicious. Practical first steps include:

• Monitor bank and credit-card statements for unfamiliar transactions and enable transaction alerts where available.
• Change passwords on work and personal accounts that may have been used in correspondence with the company, and enable multi-factor authentication.
• Be cautious of e-mails or calls that claim to be from Fuller Metric Parts or its partners and that request urgent payment or personal verification.
• Request a free credit report or fraud alert from the relevant national credit agencies if you believe financial details may have been involved.
• Run a free exposure scan of your e-mail address to check whether it has already appeared in known breach data sets.

Public detail remains limited; any further official statements from the company or law-enforcement agencies should be followed for updated guidance.

AICompiled with AI assistance from public sources and published under our editorial standards.