Watertech of America, WorldPoint ECC, Mastermedia, Garrett Leather, Guttenberg Industries. Listed by akira Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
Five organizations—Watertech of America, WorldPoint ECC, Mastermedia, Garrett Leather, and Guttenberg Industries—were listed by the Akira ransomware group on December 24, 2025, after internal files were taken in a ransomware attack. The number of people affected is not yet known; anyone who does business with these companies should check for unusual account activity and follow guidance from each organization.
Inside the incident
The incident came to light through a listing posted by the Akira group on December 24, 2025. The group states that it obtained more than 12 gigabytes of data from the five named organizations. No further details on the timing of the intrusion, the method of access, or the total volume of data affected have been disclosed. The organizations have not issued public statements confirming or disputing the claims.
Who is akira?
Akira is a ransomware operation that first appeared in early 2023. Public reporting has documented the group’s use of encryption combined with data exfiltration, followed by listings on a dedicated leak site when ransom demands are not met. The group has targeted organizations across multiple industries and regions. In this case, the listing of the five companies constitutes the group’s claim; independent confirmation of the data’s authenticity or scope has not been reported.
Who is Watertech of America, WorldPoint ECC, Mastermedia, Garrett Leather, Guttenberg Industries. Listed by akira Ransomware Group?
Watertech of America, Inc. provides industrial water treatment services, primarily in the Midwest, covering boiler water, cooling water, and wastewater systems. WorldPoint supplies healthcare training services and materials, including curricula and supplies aligned with organizations such as the American Heart Association. Mastermedia International operates in the media and entertainment sector with a focus on faith-based content. Public information on Garrett Leather and Guttenberg Industries is limited in the available record. These organizations collectively handle operational, training, and commercial data that can include records of clients, trainees, and business partners.
What data was at risk
The only data type identified in the listing is internal files exfiltrated during a ransomware attack, with the group claiming a total exceeding 12 gigabytes across the five companies. No specific categories of personal information, such as names, contact details, or financial records, have been named. Organizations of this type commonly maintain employee records, customer or trainee information, and operational documents; however, the exact contents of the claimed exfiltration remain unconfirmed.
Why it matters
Exposure of internal files can reveal business processes, partner relationships, and personal identifiers tied to employees or clients. For individuals, this may lead to follow-on risks such as targeted phishing or misuse of contact information. For the organizations, the incident adds to the operational burden of assessing and responding to unauthorized access, regardless of whether the data is later verified as publicly released.
If your data was in this claimed breach
Monitor accounts associated with the affected organizations for unusual activity and consider enabling multi-factor authentication where available. Review any communications from the companies regarding the incident. Readers can also run a free exposure scan of their email address against known breach data sets to check for prior appearances of their information.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
Wisconsin Knife Works, The Smith Companies, Envirotech Services, Next Generation Logistics... Listed by akira Ransomware GroupWisconsin Knife Works, The Smith Companies, Envirotech Services, Next GenerationLogistics,... Listed by akira Ransomware GroupPM Plastics, Reliable Van & Storage, Landis, Whitinger Strategic Services, Kimber Manufact... Listed by akira Ransomware GroupBarbizon Lighting Company, Roseburrough Tool, Mqd, McKay Empire, Victor Insulators. Listed by akira Ransomware GroupLatest breaches
Publicly posted by akira — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.