Leo International Hit by Akira Ransomware
Leo International, a U.S.-based manufacturing and distribution company serving PVF, HVAC, and industrial sectors since 1986, was claimed by the Akira ransomware group. The actors stated they would upload 10GB of corporate data, including employee personal documents such as passports, SSNs, driver's licenses, medical information, photos, and internal confidential files.
- personal documents
- ssn
- passports
- medical information
- internal files
On June 24, 2026, the Akira ransomware group claimed responsibility for breaching Leo International, a U.S. manufacturing and distribution company that has supplied pipe, valve, fitting, HVAC, and industrial products since 1986. The attackers said they planned to publish roughly 10 GB of stolen corporate data containing employees’ personal documents, including passports, Social Security numbers, driver’s licenses, medical records, photographs, and internal confidential files. Anyone who has ever worked at or done business with the company may have their sensitive information at risk.
Public reporting from BreachSense and Ransomware.live confirms the Akira group’s claim. The exposed materials go well beyond typical corporate files and include the kinds of personal identifiers that can be used to open fraudulent accounts, file fake tax returns, or impersonate victims online. The precise number of affected individuals remains unknown, but the volume and nature of the records suggest thousands of current and former employees, contractors, and possibly their family members could be impacted.
Want the rest of this breakdown?
Sign up free to keep reading. Members get extended access, the weekly breach digest, and a complimentary Warden™ to see if their identity is exposed in the breaches we cover.
A breach leaks your credentials. Then hackers chain those credentials to your address, family, phone, and employer using public broker sites. We’re the only tool built around that chain.
⚠ Were you in this breach?
Free email scanner. We check your address against 15.4B+ leaked records in 15 seconds — then show you the $19 cleanup that removes you from the broker sites aggregating leaked data.
Check my email — free →