RANSOMWARE VICTIMMANUFACTURINGDUPLICATE CLAIM

BUHLMANN GROUP

akira📍 Germany (DE)📅 January 7, 2026
8
same group

Attack Intelligence

BUHLMANN GROUP was compromised in a ransomware attack attributed to akira in January 2026. The organization, operating in the Manufacturing sector in Germany, was added to the group's data leak site as part of an extortion campaign.

akira operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

BUHLMANN GROUP is a premium trading company specializing in steel pipes, pipe fittings, and accessories, serving various industrie s including energy, chemicals, shipbuilding, and machine construc tion. We will upload more than 55gb of corporate data soon. Lots of dra wings and specifications, confidentiality agreements, employees p ersonal documents, project files, financials, contracts and agree ments, customers information and so on.

Additional Details

Other Victims — akira (8)

Quick Facts

CountryGermany (DE)
SectorManufacturing
Attack DateJan 7, 2026
Intel Sourceransomware.live
StatusDUPLICATE CLAIM

Threat Group

akira
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.