Ransom! Baycoat

The threat actor akira has claimed a ransomware attack on Baycoat, Canada, asserting they will release approximately 19GB of sensitive corporate data, including employee passports, driver’s licenses, financial, medical, and contractual information, due to a recent security breach. The impacted country is #Canada.

Incident Details

  • Victim: Baycoat
  • Country: CA
  • Actor: akira
  • Source:
  • Discovered: 2025-08-27 12:19:04.755579
  • Published: 2025-08-27 00:00:00.000000

Information

  • Baycoat is the largest steel coil coater in Canada.
  • It employs approximately 175 workers.
  • Baycoat operates two coating lines capable of handling numerous paint systems.
  • The company offers well over 1,000 colours.
  • Approximately 19GB of corporate files will be uploaded, including sensitive personal and corporate information.
  • The files contain passports and driver’s licenses of employees.
  • They also include personal and corporate financial information.
  • Medical information is part of the data set.
  • Accounting documents such as payment details and reports are included.
  • Confidential agreements and contracts, including NDAs, are among the files.

Disclaimer: This post is based on public claims made by the ransomware group "akira". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live