Ransomware victim disclosure
← All victimsPipestone
Claimed by akira · listed 16 days ago
Status timeline
- Listed
May 5, 2026
- Data leaked
At a glance
About the victim
AI dossier — public-source company profileATF Aerospace specializes in aerospace manufacturing and distribution, supplying high-quality mechanical and electrical components sourced from leading manufacturers. Their manufacturing capabilities focus on CNC milling and lathe operations, with an emphasis on short-run and quick-turnaround projects. The company operates in the United States aerospace sector.
- Industry
- Aerospace Manufacturing & Distribution
Attack summary
Severity: critical — The group claims exfiltration of regulated PII at scale including passports, SSNs, driver's licenses, medical information, and financial records for both employees and clients, constituting a confirmed breach of multiple categories of sensitive/regulated personal data.Akira claims to have exfiltrated approximately 137 GB of corporate data from ATF Aerospace, including detailed client and employee personal documents, databases containing personal information, litigation documents, contracts, insurance files, and NDAs, with publication of the data described as imminent.
Data the group says was taken
AI dossier — extracted from the leak post- Passports
- Social Security Numbers (SSNs)
- Driver's licenses
- Financial records
- Medical information
- Personal information databases
- Litigation documents
- Contracts and agreements
- Insurance files
- NDAs
What the group claims
ATF Aerospace specializes in aerospace manufacturing and distribution, offering high-quality me chanical and electrical components sourced from leading manufacturers. Their manufacturing capa bilities focus on CNC milling and lathe operations, emphasizing short runs and quick turnaround projects. We will upload 137gb of corporate data soon. Detailed client and employee personal documents (p assports, SSNs, DLs, financial and medical information), DBs with personal info, litigation doc s, contracts and agreements, insurance files, NDAs, etc.
Source
Indexed 16 days agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
