Akira ramsomware gang claims breach of Wakefield & Associates
Learn More
Wakefield & Associates, LLC, a medical debt collection company, is reporting a breach that compromised sensitive personal and health information of thousands of individuals in the United States.
On September 24, 2025, the company discovered a breach and theft of files within its network. The investigation concluded that the breach occurred on or before January 17, 2025. The breach was claimed to the dark web on February 11, 2025, nearly eight months before the company discovered the incident.
The breach was claimed the Akira ransomware group. The huge delay raises serious questions about the company's cybersecurity monitoring capabilities and whether the delayed disclosure met regulatory requirements. The compromised information includes:
- Names
- Collection account information
- Social Security numbers
- Driver's license or state identification card numbers
- Financial information
- Health information
The number of affected individuals is not disclosed.
Wakefield & Associates is offering affected individuals complimentary credit monitoring and identity theft protection services. The company has established a dedicated assistance line at 1-833-833-7202, available Monday through Friday from 9 a.m. to 8 p.m. Eastern Time, to answer questions and provide support to those impacted by the breach.
