Office Peeps, Nappie's Food Service, Janome America, IT-Supporten, A-1 Pools. Listed by akira Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
On March 30, 2026, the Akira ransomware group listed Office Peeps, Nappie's Food Service, Janome America, IT-Supporten, and A-1 Pools after internal files were exfiltrated from each organisation; the date of the intrusions has not been established. Anyone who has had dealings with these companies should review their accounts and watch for suspicious activity.
Inside the incident
The incident came to light through a listing on the akira group's site dated March 30, 2026. The only confirmed detail is the claimed volume of data—roughly 13 gigabytes described as internal files exfiltrated during a ransomware operation. No information has been released about the date of the intrusion, the method of initial access, the encryption status of systems, or any ransom demand. The number of people whose information may be involved remains undisclosed.
The group behind it: akira
Akira is a ransomware operation that has conducted campaigns against organizations in multiple sectors since at least 2023. Public reporting has documented its use of double-extortion tactics, in which data is copied before encryption and later threatened with disclosure if payment is not received. The group maintains a leak site where it posts names of claimed victims and sample material. Its listing of these five companies constitutes an assertion by the group; independent confirmation of the data's origin or volume has not been provided.
Who is Office Peeps, Nappie's Food Service, Janome America, IT-Supporten, A-1 Pools. Listed by akira Ransomware Group?
Office Peeps supplies office products, including general stationery, ink and toner, break-room items, and janitorial materials. Nappie's Food Service operates as a family-owned distributor of restaurant supplies and food-service goods in the Pittsburgh area. Janome America serves as the primary U.S. subsidiary of a Japanese manufacturer of sewing machines and related equipment. IT-Supporten and A-1 Pools provide technology support services and pool construction or maintenance, respectively. Each organization routinely processes customer records, supplier information, employee data, and operational documents typical of its sector.
What was likely exposed
The only data category stated in the listing is internal files obtained during the ransomware incident. No inventory of file types, specific categories such as financial records or personal identifiers, or confirmation of customer data has been released. Organizations of these types commonly maintain contact details, order histories, employee records, and vendor agreements, but the precise contents of the claimed 13 gigabytes remain unconfirmed.
Why it matters
Internal files can contain information that enables targeted follow-on activity, such as account access attempts or social-engineering efforts directed at customers and staff. For the affected organizations, the exposure may require review of existing contracts, vendor relationships, and regulatory obligations. The absence of Reported Details on the number of individuals involved limits the ability to assess the full scope at present.
If your data was in this claimed breach
Monitor financial and email accounts for unusual activity and change passwords for any services that may have been referenced in the exposed material. Enable multi-factor authentication where available. Individuals can run a free exposure scan of their email address against known breach data to determine whether their information appears in public listings.
- Review recent account statements for unrecognized transactions.
- Update passwords on affected services and avoid reuse across sites.
- Enable multi-factor authentication on email and financial accounts.
- Run a free exposure scan of your email to check known breach data.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
Northern Ohio Regional Multiple Listing Service Listed by akira Ransomware GroupInstitute of PrivateEnterprise Development Listed by akira Ransomware GroupEdge Solutions | Stone Ridge Payments Listed by akira Ransomware GroupPrecise Forms Listed by akira Ransomware GroupLatest breaches
Publicly posted by akira — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.