Akira Strikes Wispone with Devastating Ransomware Attack

Ransomware

Summary

On July 10, 2025, the ransomware group Akira publicly announced their attack on
Wispone, an Italy-based company specializing in broadband and ultra-wideband interconnectivity.
According to the threat actor’s statement, they plan to release over 36 GB of sensitive data unless their demands are met.


Incident Report

FieldDetails
TargetWispone
Domain
CountryItaly
Attacking GroupAkira
Date ReportedJuly 10, 2025
Threat Actor Statement“We are ready to upload more than 36 GB of essential corporate documents. Lots of client/employees IDs and passports scans, detailed financial data and numerous agreements, NDAs and so on.”

About Wispone

Wispone is dedicated to connecting users with broadband and ultra-wideband services across Italy, overcoming geographic and technical challenges to deliver customer-centric solutions.

About Akira Group

Akira is a notorious ransomware group known for targeting organizations worldwide, deploying sophisticated attacks that often lead to significant data breaches and financial loss.

Proactive Response and Dark Web Monitoring

To combat such threats, organizations must implement proactive cybersecurity measures, including continuous dark web monitoring. This allows for early detection of compromised data and helps mitigate potential damage.

We recommend using tools like the Email Breach Checker to monitor your company’s exposure and stay informed about potential threats.

Recommendations

  • Monitor your domains and email addresses for exposure using reputable threat intelligence tools.
  • Conduct a full compromise assessment and incident response drill internally.
  • Verify backups and ensure they are offline and ransomware-resistant.
  • Educate staff on phishing, social engineering, and lateral movement techniques used by groups like Qilin.
  • Engage with cyber forensics and legal counsel before initiating contact with threat actors.

Check Your Exposure

Wondering if your organization or employees are impacted by recent breach activity?


Disclaimer

The MSPDarkIntel team does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information.
All breach data reported here is sourced from publicly available threat intelligence feeds for awareness and early-warning purposes only.
Our goal is to inform organizations of emerging threats so they can take timely defensive action.

Keep reading