Mercury Paper Inc Listed by akira Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target manufacturers and mid-market suppliers, using data theft and public leak-site listings to pressure victims. In this environment, even companies outside the technology sector face the same double-extortion playbook that has become routine across industries.

On February 27, 2025, Mercury Paper Inc was listed by the Akira ransomware group. Public detail remains limited: the number of people affected is unknown, and the only confirmed description is that internal files were allegedly exfiltrated in a ransomware attack. The listing itself is a claim by the group, which states it is prepared to publish more than 100 GB of corporate material. For employees, customers, and partners of a paper-products manufacturer, the incident raises concrete questions about what may have left the company and what practical steps follow.

Breaking down the breach

According to the available record, Mercury Paper Inc appeared on Akira’s leak site on February 27, 2025. The group asserts that it has taken internal files and is ready to upload more than 100 GB of essential corporate documents. No independent confirmation of the intrusion method, the exact date of access, or the total volume of data has been published. The number of individuals whose information may be involved is listed as unknown. What is stated is that the material consists of internal files obtained during a ransomware attack. Beyond the group’s own description of the contents, further technical or forensic detail has not been disclosed.

The group behind it: akira

Akira is a well-documented ransomware operation that emerged in 2023 and has since conducted numerous double-extortion campaigns. The group typically encrypts systems while simultaneously copying data, then threatens to publish the stolen material on a dedicated leak site if a ransom is not paid. Public reporting has shown Akira targeting a wide range of sectors, including manufacturing, professional services, and mid-sized enterprises, often using initial access through compromised credentials or unpatched remote-access services. The group’s leak-site listings serve as both pressure and advertising; each entry is a claim by the operators rather than verified proof of every file’s authenticity or completeness. In this case, Akira claims it holds Mercury Paper’s corporate documents and is prepared to release them. No further statements from the group specific to this victim, beyond the listing language, appear in the public record.

Who is Mercury Paper Inc?

Mercury Paper Inc is described as a rapidly growing manufacturer of bath tissue and paper towels. It provides contract manufacturing to Oasis Brands for FIORA®, identified as one of the faster-growing brands in the U.S. market. Companies of this type sit in the consumer-packaged-goods supply chain: they handle production schedules, quality documentation, supplier contracts, customer and retailer contacts, and financial records tied to high-volume paper goods. A breach at such a firm can affect not only its own workforce but also brand partners, distributors, and any individuals whose contact or contractual details appear in shared files. Because manufacturing operations often rely on shared systems for orders, logistics, and compliance, the exposure of internal documents can create secondary risks for the wider commercial network.

The information in question

The facts state that internal files were exfiltrated. Akira claims the material includes more than 100 GB of essential corporate documents such as financial data (audits, payment details, reports), contact numbers and e-mail addresses of employees and customers, confidential licenses, agreements and contracts, and similar records. Exact contents remain unconfirmed by independent sources; the list is the group’s assertion. Organisations in paper-products manufacturing typically maintain employee directories, customer and retailer contact lists, purchase and sales contracts, quality and regulatory files, and financial statements. Whether any of those categories were in fact taken, and in what volume, has not been verified beyond the leak-site claim. No specific count of records or named individuals has been released.

The real-world impact

For people whose contact details or contractual information may appear in the claimed files, the immediate risks are phishing, social-engineering attempts, and unsolicited outreach that uses accurate personal or business context. Financial documents, if authentic, could be used to craft more convincing fraud or to identify payment patterns. For the company itself, the exposure of licenses, agreements, and internal reports can create competitive and legal pressure, disrupt partner relationships, and require notification and remediation work even when the full scope remains unclear. Because the number of affected individuals is unknown, the practical effect ranges from limited internal inconvenience to broader customer and employee notification obligations, depending on what is ultimately confirmed. The listing alone does not prove every claimed file is genuine or complete, yet it still places the organisation under public scrutiny and forces defensive measures.

If your data was in this claimed breach

If you are an employee, customer, or partner of Mercury Paper Inc or its brand clients, treat any unexpected messages that reference the company or its products with caution. Change passwords on accounts that may share credentials with work systems, enable multi-factor authentication where available, and monitor financial and email accounts for unusual activity. Keep records of any suspicious contact. Because the exact data set is unconfirmed, a free exposure scan of your email address against known breach collections can help determine whether your information has already appeared in public dumps. Remain alert for follow-up communications from the company itself once more verified detail becomes available.

AICompiled with AI assistance from public sources and published under our editorial standards.