Infosoft Listed by akira Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to pressure organisations by combining encryption with data theft and public leak-site listings, a pattern that has become a routine feature of the current threat landscape. On 6 March 2024, the New Zealand software firm Infosoft appeared on a listing associated with the Akira ransomware group, which claimed to have exfiltrated internal files and stated that the material would soon be available for download.

Public detail remains limited: the number of people affected is unknown, and the precise method and timing of the intrusion have not been disclosed. What is known is that the group described the material as numerous operational files, projects and documents containing personal information. For anyone whose data may sit inside those systems, the listing raises immediate questions about exposure and next steps.

Breaking down the breach

According to the available record, Infosoft was listed by the Akira ransomware group on 6 March 2024. The group asserted that internal files had been exfiltrated in a ransomware attack and that the data would be made available for downloading soon. The listing specifically referenced numerous operational files, projects and documents with personal information. No confirmed figure for the volume of data, the number of affected individuals, or the exact date of the intrusion has been published. The method of initial access is likewise undisclosed. The listing itself constitutes a claim by the group rather than an independently verified confirmation of every detail.

The group behind it: akira

Akira is a ransomware operation that has been active since early 2023 and is known for a double-extortion model: encrypting systems while also stealing data and threatening to publish it on a dedicated leak site if payment is not made. The group typically targets mid-sized organisations across multiple sectors and has previously listed victims in manufacturing, professional services and technology. Public reporting indicates that Akira often gains initial access through compromised credentials or vulnerable remote-access services, then moves laterally before deploying its encryptor and exfiltrating files. In this case the group claims Infosoft’s data will be released; that claim has not been independently corroborated beyond the leak-site listing itself.

About Infosoft

Infosoft is a New Zealand-owned and operated software development company that supplies an integrated range of products and services covering software design, development, implementation and support. Organisations of this type routinely hold source code, project documentation, client contracts, employee records and operational data needed to deliver and maintain software systems. A breach at such a firm is consequential because the material can include both proprietary intellectual property and personal information belonging to staff, clients or partners. The exposure of that information can affect not only Infosoft’s own operations but also the privacy and security of people whose details appear in the files.

The information in question

The facts name the exposed material as internal files exfiltrated in a ransomware attack, described by the group as numerous operational files, projects and documents with personal information. Exact data types beyond that description have not been itemised in public reporting, and the number of people affected remains unknown. Software-development firms typically store source repositories, design documents, client correspondence, employee records and configuration files; whether any or all of those categories were present in the claimed exfiltration is unconfirmed. Readers should therefore treat the precise contents as unverified pending further disclosure.

Why it matters

For individuals whose personal information may appear in the files, the principal risks are identity misuse, targeted phishing and unsolicited contact that exploits knowledge of their relationship with Infosoft or its clients. For the organisation, the consequences include potential disruption of development work, loss of proprietary project material, regulatory notification obligations under New Zealand privacy law, and reputational damage that can affect client trust. Because the scale of the exposure is unknown, both the company and any affected parties must operate under the assumption that sensitive material could surface publicly if the group follows through on its claim.

What to do if you're exposed

If you have a past or present connection to Infosoft—as an employee, contractor or client—treat the possibility of exposure seriously even though the full scope is unconfirmed. Practical first steps include:

• Monitor bank and credit accounts for unexpected activity and enable transaction alerts where available.
• Change passwords on any accounts that may have used the same credentials as Infosoft-related systems, and enable multi-factor authentication.
• Be alert to phishing emails or calls that reference Infosoft projects or personal details that could have come from internal files.
• Request a free credit report or identity-monitoring service if you believe personal identifiers were involved.
• Run a free exposure scan of your email address against known breach data sets to check whether your information has already appeared elsewhere.

These measures do not eliminate risk, but they reduce the chance that any leaked material can be used against you without detection. Further official statements from Infosoft or New Zealand authorities should be watched for confirmation of the data types and any recommended remediation.

AICompiled with AI assistance from public sources and published under our editorial standards.