Radiant Canada Listed by akira Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target logistics and supply-chain firms, where operational data and personal records create pressure for payment and lasting risk for individuals. In this landscape, listings on criminal leak sites remain a common way attackers publicise claimed breaches and attempt to force negotiations.

On 4 April 2024, the ransomware group akira listed Radiant Canada on its leak site, claiming to have exfiltrated internal files. Public detail on the incident remains limited; the number of people affected is unknown, and independent confirmation of the claims has not been established in the available record.

Inside the incident

According to the listing attributed to akira, Radiant Canada was the subject of a ransomware attack in which internal files were taken. The group stated that 25 GB of material was prepared for upload and described the contents in broad terms as including financial data, personal information of employees, and client information. No further technical detail—such as the initial access method, the precise date of intrusion, encryption of systems, or any ransom demand—has been disclosed in the public facts. The scale of any impact on operations or the number of individuals whose data may have been involved is likewise unconfirmed.

The listing itself constitutes a claim by the group rather than verified evidence of a completed breach. Organisations named in this way sometimes confirm, partially confirm, or dispute such claims; no such statement from Radiant Canada is included in the available record.

The group behind it: akira

Akira is a ransomware operation that has been active since early 2023. Like many contemporary groups, it typically employs a double-extortion model: data is stolen before systems are encrypted, and the threat of public release is used to increase pressure on the victim. The group maintains a dark-web leak site where it posts victim names, sample files, and countdown timers. Public reporting has associated akira with attacks across multiple sectors, including manufacturing, professional services, and logistics, often after exploiting known vulnerabilities or compromised credentials. The group’s claims about any specific victim, including the volume and nature of data, should be treated as unverified assertions until corroborated by the organisation or independent investigation.

Who is Radiant Canada?

Radiant Canada describes itself as the product of combining three decades of transportation-management expertise with warehousing services. Firms of this type sit at the intersection of freight coordination, inventory storage, and supply-chain logistics. They routinely handle shipping records, customer and vendor contact details, employee information, financial documents related to contracts and payments, and operational data that can reveal business relationships and movement of goods. A breach at such an organisation is consequential because the data often spans both commercial partners and individuals, and because disruption or exposure can affect downstream customers who rely on timely logistics.

The information in question

The facts name the exposed material only as internal files exfiltrated in a ransomware attack. The group’s listing further claims that the 25 GB cache contains a substantial amount of financial data, personal information of employees, and client information. Exact file inventories, specific data fields, or confirmation that any particular category was in fact taken remain unconfirmed. Organisations in transportation and warehousing typically hold employee records (names, contact details, payroll or benefits data), client and vendor files (addresses, account numbers, shipment histories), and financial documents (invoices, contracts, banking details). Whether any of those categories were present in the claimed exfiltration cannot be stated as fact from the available record.

Why it matters

When personal or financial information is taken, affected individuals face practical risks that can persist for years: targeted phishing that references real employment or shipping details, identity-fraud attempts, or unsolicited contact that appears legitimate because it draws on genuine records. For the organisation, the consequences can include regulatory notification duties, contractual obligations to clients, and the operational cost of investigating and containing the incident. Because the number of people affected is unknown and the precise contents are unconfirmed, the full scope of exposure cannot yet be quantified; that uncertainty itself is part of the risk for anyone who has dealt with Radiant Canada as an employee, client, or partner.

If your data was in this claimed breach

If you have reason to believe your information may have been held by Radiant Canada, practical first steps are straightforward and do not require waiting for further official statements:

• Monitor bank and credit-card statements for unfamiliar activity and enable transaction alerts where available.
• Treat unexpected emails or calls that reference employment, shipments, or invoices with extra caution; verify through known official channels rather than links or numbers supplied in the message.
• Consider placing a fraud alert or credit freeze with the major Canadian credit bureaus if financial or identity data may be involved.
• Change passwords on any accounts that reused credentials associated with the organisation, and enable multi-factor authentication where it is offered.
• Keep records of any correspondence you receive that appears related to the incident.

Readers can also run a free exposure scan of their email address to check whether that address has already appeared in other known breach data sets. Such a check does not confirm or rule out involvement in this specific incident, but it can surface earlier exposures that warrant the same protective steps.

AICompiled with AI assistance from public sources and published under our editorial standards.