RANSOMWARE VICTIMMANUFACTURINGDUPLICATE CLAIM

Waukegan Steel

akira📍 United States (US)📅 November 13, 2025
8
same group

Attack Intelligence

Waukegan Steel was compromised in a ransomware attack attributed to akira in November 2025. The organization, operating in the Manufacturing sector in United States, was added to the group's data leak site as part of an extortion campaign.

akira operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Waukegan Steel is a structural steel fabricator serving the Midwe st, specializing in high-quality steel fabrication since 1929. Th e company has worked on notable projects in the Chicago area, suc h as Soldier Field and Willis Tower, offering a complete range of services including structural, miscellaneous, and ornamental ste el fabrication. We will upload almost 15gb of corporate documents soon. Scanned p ersonal documents (passports, social security numbers, driver lic enses, w-9 forms and so on), project information, NDAs, contracts and agreements, financials, client's information, lots of drawin gs of ongoing projects, etc.

Additional Details

Other Victims — akira (8)

Quick Facts

CountryUnited States (US)
SectorManufacturing
Attack DateNov 13, 2025
Intel Sourceransomware.live
StatusDUPLICATE CLAIM

Threat Group

akira
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.