Ransomware victim disclosure
← All victimsHal Otey Financial
Claimed by akira · listed 10 hours ago
Status timeline
- Listed
Jun 3, 2026
- Data leaked
At a glance
- Group
- akira
- Status
- Data leaked
- Sector
- Financial Services
- Listed on leak site
- Jun 3, 2026
About the victim
AI dossier — public-source company profileHal Otey Financial is a financial services firm offering wealth management, financial planning, retirement planning, investment management, estate planning, and tax planning services. No additional public information is available.
- Industry
- Wealth Management & Financial Planning
Attack summary
Severity: critical — Confirmed exfiltration and publication of highly sensitive regulated data including PII at scale (SSNs, government-issued IDs, health records, insurance information) affecting financial services clients. This includes multiple categories of protected information under HIPAA, FCRA, and state privacy laws.The Akira group claims to have exfiltrated corporate and client data, including personal identification documents (passports, driver's licenses), social security numbers, health and insurance files, contracts, agreements, and detailed financial records. Data has been published.
Data the group says was taken
AI dossier — extracted from the leak post- passports
- driver's licenses
- social security numbers
- health files
- insurance files
- contracts and agreements
- detailed financials
- projects
What the group claims
Hal Otey Financial offers a range of financial services including wealth management, financial planning, retirement planning, investment management, estate planning, and tax planning. We will upload corporate data soon. Lots client data (passports, DLs, social security numbers, health and insurance files and so on), contracts and agreements, detailed financials, projects, etc.
Source
Indexed 10 hours agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
Is this your supplier? Your competitor? You?
Pro plans monitor your domain, corporate emails, and crypto wallets across every new ransomware leak-site post, breach dump and Telegram callout — alerts within 5 minutes.
