Nickman, DHK Architects, Profondia, Talbot & Associates, Fishbowl Solutions. Listed by akira Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On December 8, 2025, the Akira ransomware group listed Nickman, DHK Architects, Profondia, Talbot & Associates, and Fishbowl Solutions on its leak site and claimed to have obtained roughly 24 GB of internal files from the organizations. No confirmation of the volume, the specific files, or any ransom payment has been made public, and the number of individuals whose information may be involved remains unknown. The listing marks the only reported detail available at this time. The group stated that the material consists of internal files taken during a ransomware operation, but it has not published additional technical information or a timeline of access.

Breaking down the breach

The incident was first noted through the Akira group’s leak-site posting on December 8, 2025. The post asserts that approximately 24 GB of data belonging to the five named organizations was removed. No independent verification of the claim, the encryption status of the affected systems, or the method of initial access has been released. The number of people potentially affected is not stated in the available reporting.

Inside akira

Akira is a ransomware operation that has been publicly active since early 2023. The group typically uses double-extortion tactics, encrypting systems and copying data before demanding payment. Its listings on dedicated leak sites serve as the primary public signal that an incident has occurred. Prior activity attributed to the group has involved mid-sized organizations across multiple sectors, though each claim remains unverified until corroborated by the victim or law-enforcement reporting.

Who is Nickman, DHK Architects, Profondia, Talbot & Associates, Fishbowl Solutions. Listed by akira Ransomware Group?

The listed entities operate in distinct sectors. Nickman’s Drug runs five community pharmacies in the Lemont area and handles prescription and patient-care records. DHK Architects is a Boston-based architecture and planning firm with additional offices in New York City and San Juan. Profondia supplies market data on information and communications technology use in Switzerland. Talbot & Associates CPA is a bilingual accounting practice in Manitoba recognized among the larger firms in Winnipeg. Fishbowl Solutions is identified only by name in the listing. Each organization routinely maintains internal business records, client or customer information, and operational documents typical of its field.

What data was at risk

The Akira listing refers only to “internal files” and provides no further inventory. The precise categories of information contained in the claimed 24 GB remain undisclosed. Organizations of these types commonly store employee records, client correspondence, financial documents, project files, and regulatory materials, but the exact contents of the exfiltrated material have not been confirmed.

What's at stake

Exposure of internal files can lead to follow-on fraud, targeted phishing, or misuse of proprietary information. For pharmacies and accounting firms, any patient or client records involved could create compliance obligations under health or financial privacy rules. Architecture and market-research firms may face competitive or contractual concerns if project or client data is involved. The practical impact depends on the specific documents that were taken, which are not yet known.

If your data was in this claimed breach

Monitor accounts for unusual activity and consider placing fraud alerts with credit agencies if financial or identity documents appear to have been involved. Review any communications from the affected organizations for guidance on next steps. Individuals can also run a free exposure scan of their email address against known breach data sets to check for prior appearances of their information.

AICompiled with AI assistance from public sources and published under our editorial standards.