Ransomware

    Akira Strikes Souleret Engineering with Massive Ransomware Attack

    mspdarkintel
    July 18, 2025
    2 min read
    Akira Strikes Souleret Engineering with Massive Ransomware Attack

    Summary

    On July 18, 2025, the ransomware group Akira publicly claimed responsibility for an attack targeting
    Souleret Engineering (LSSE), a U.S.-based company specializing in civil engineering and surveying.
    According to the threat actor’s post, they intend to release over 14 GB of sensitive data unless negotiations are initiated.


    Incident Report

    Field Details
    Target Souleret Engineering (LSSE)
    Domain
    Country USA
    Attacking Group Akira
    Date Reported July 18, 2025
    Threat Actor Statement “We are ready to upload more than 14 GB of corporate documents unless a company representative contacts us via the channels provided.”

    About Souleret Engineering (LSSE)

    Souleret Engineering (LSSE) is a renowned entity in the field of civil engineering and surveying, catering to various markets such as municipal, commercial, industrial, residential, utilities, and energy sectors. Their expertise makes them a vital player in the industry, handling numerous important projects across the USA.

    About Akira Group

    The Akira ransomware group is known for its aggressive tactics in targeting organizations across multiple sectors. Their modus operandi often involves threatening to release sensitive data unless their financial demands are met.

    Proactive Response to Ransomware Threats

    Organizations must take a proactive approach to safeguard against ransomware attacks. Dark web monitoring plays a crucial role in detecting potential threats and compromised data early on, enabling timely intervention. To ensure your company’s security, utilize tools like the email breach checker available at mspdarkintel.com/domain-breach-scan to keep an eye on unauthorized data exposure.

    Recommendations

    • Monitor your domains and email addresses for exposure using reputable threat intelligence tools.
    • Conduct a full compromise assessment and incident response drill internally.
    • Verify backups and ensure they are offline and ransomware-resistant.
    • Educate staff on phishing, social engineering, and lateral movement techniques used by groups like Qilin.
    • Engage with cyber forensics and legal counsel before initiating contact with threat actors.

    Check Your Exposure

    Wondering if your organization or employees are impacted by recent breach activity?


    Disclaimer

    The MSPDarkIntel team does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information.
    All breach data reported here is sourced from publicly available threat intelligence feeds for awareness and early-warning purposes only.
    Our goal is to inform organizations of emerging threats so they can take timely defensive action.

    Last updated: July 18, 2025

    Related Articles

    Cicada 3301 Strikes Dias de Primavera: A Comprehensive Look
    Ransomware

    Cicada 3301 Strikes Dias de Primavera: A Comprehensive Look

    July 18, 2025
    Cicada 3301 Strikes GAT Logistica with Ransomware
    Ransomware

    Cicada 3301 Strikes GAT Logistica with Ransomware

    July 18, 2025
    Cicada 3301’s Bold Strike on B&M – Expertise – Audit
    Ransomware

    Cicada 3301’s Bold Strike on B&M – Expertise – Audit

    July 18, 2025