Northern Air Systems(2)
akiraThis record tracks a ransomware attack claimed by the akira group against Northern Air Systems(2). It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Breach House.
Window Zero
EXPOSURE GAPWindow Zero is the time the breach stayed in the open before anyone said so — the gap between when the attack was first discovered on the operator's leak site (t1) and when it was publicly disclosed (t2). The wider this window, the longer victims, staff and customers were exposed with no warning.
Attack Summary
Northern Air Systems has been a leading manufacturer of high-qual ity HVAC systems for commercial and industrial applications for n early three decades. As you could have noticed, we've made it 2nd time to penetrate to their systems and locked almost 90 vms. At this time we've taken five times more data (150gb) and we will upload the files soon. Detailed employee information (i-9 forms, passports, DLs, medical information, pictures and so on), client data (DLs, addresses, e mails), detailed financials, lots of projects information, contra cts and agreements, numerous NDAs, etc.
Leak Screenshots
SAMPLEProof-of-breach screenshots the operator posted from the stolen data. Previews are redacted and locked — the originals are available on HaveIBeenRansom.