Icat Food SpA Listed by akira Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On January 21, 2026, the Akira ransomware group listed Icat Food SpA on its leak site and stated that it had exfiltrated internal files during a ransomware attack. The number of people affected has not been disclosed, and the company has not publicly confirmed the claim or the volume of data involved. This event occurs amid ongoing ransomware activity that frequently targets companies holding operational and personal records in supply-chain sectors. Public reporting of such listings provides one of the few available indicators when victim organisations do not issue statements.

What happened

The incident was reported on January 21, 2026, when Akira placed Icat Food SpA on its data-leak site. The only confirmed detail is that internal files were allegedly exfiltrated. No information has been released on the date of the intrusion, the method of initial access, the encryption of systems, or any ransom demand. The number of individuals whose data may be involved remains unknown.

The group behind it: akira

Akira is a ransomware operation that publicly lists victims on a dedicated site and threatens to release stolen data. The group commonly uses double-extortion tactics, first encrypting files and then publishing samples or directories to pressure organisations. Its listings constitute claims by the group rather than independently verified statements. Akira has appeared in multiple public reports since 2023, with activity documented across manufacturing, logistics and food-related companies.

About Icat Food SpA

Icat Food SpA is an Italian company with more than a century of operation in the seafood industry. It produces goods that combine national and regional traditions and maintains a Sustainable Sourcing Policy aligned with the FAO Code of Conduct for Responsible Fisheries. Companies in this sector routinely store records on suppliers, customers, employees and financial transactions to manage sourcing, compliance and distribution.

The information in question

The only confirmed category is internal files exfiltrated in the ransomware attack. Akira claims it will publish approximately 12 GB of material that includes employee information such as passports and driving licences, financial records, customer details and project files. The precise contents, file counts and whether any of the claimed data have been verified remain unconfirmed at this time.

The real-world impact

Exposure of employee identity documents and financial information can increase the risk of targeted fraud or account takeover for the individuals concerned. Customer records held by a food-sector company may contain order histories or contact details that could be used for phishing or resale. For the organisation, the incident adds potential costs related to investigation, regulatory notification and restoration of systems, though the scale of these effects has not been quantified publicly.

Were you affected?

Individuals can review account statements and credit reports for unusual activity and enable multi-factor authentication on any services linked to the company. A free exposure scan of an email address against known breach datasets can indicate whether personal information has appeared in previously published collections, though it cannot confirm presence in this specific incident. Organisations advise contacting Icat Food SpA directly for any official notification process.

AICompiled with AI assistance from public sources and published under our editorial standards.