2026 Alkegen (ASP Unifrax) — Akira ransomware; SSNs + health records notices (Jul)
Data compromised
Per Vermont AG security-breach notice (Jul 17, 2026): Social Security numbers and health records (23 Vermont residents listed). Massachusetts sample mailed notice confirms personal information exposure with Kroll monitoring. Akira marketing claimed employee personal documents (passports, DLs, contacts, addresses, medical info) and client personal information—company notice does not restate all actor categories.
Technical writeup
Verified company/regulator notification — notices began July 17, 2026. ASP Unifrax Holdings, Inc. (operating as Alkegen) filed a Vermont Attorney General security-breach notice listing 23 Vermont residents with Social Security numbers and health records flagged, and submitted a Massachusetts sample mailed notice offering Kroll identity monitoring. Earlier, on April 23, 2026, Akira listed Alkegen on its leak site claiming roughly 57 GB of corporate data including employee personal documents and client personal information, with access claimed around March 13, 2026. A nationwide affected-individual total had not been published in sources reviewed; BreachHistory retains recordsAffected 0 pending an attested nationwide count while indexing the Vermont floor of 23 residents.
Root cause
Akira ransomware group claimed ~57 GB exfiltration around March 13, 2026 (leak-site Apr 23); company later notified individuals of a data security incident
References
- https://ago.vermont.gov/categories/security-breach-notices
- https://www.classaction.org/data-breach-lawsuits/alkegen-july-2026
- https://www.classaction.org/media/alkegen-data-breach-mailed-notice-2026.pdf
- https://classactionu.org/current-data-breaches/alkegen/
- https://ransomware.live/id/QWxrZWdlbkBha2lyYQ
- https://www.dexpose.io/akira-strikes-alkegen-ransomware-attack-on-specialty-materials-leader/