Leo International
Attack Intelligence
Leo International was compromised in a ransomware attack attributed to akira in June 2026. The organization, operating in the Not Found sector in United States, was added to the group's data leak site as part of an extortion campaign.
akira operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
Leo International, established in 1986, serves as a comprehensive source for the PVF, HVAC, and Plumbing Industry. The company specializes in manufacturing products through Forging, Casting, and Injection Molding processes. We will upload 10gb of corporate data soon. Employee personal docs (passports, SSNs, DLs, medic al information, phones, photos, doc scans, addresses and so on), confidential internal files an d so on.