Carlson Building Maintenance Hit by Akira Ransomware Attack, Exposing Sensitive Data of Over 1,100 Iowa Residents
Carlson Building Maintenance, a Minnesota-based facilities services provider serving retail and educational clients across the Midwest, suffered a data breach after a cyberattack on September 22, 2025. The company, which employs over 250 people, detected unauthorized access to its network and engaged third-party forensic specialists to investigate.
The Akira ransomware group claimed responsibility for the attack, announcing on October 10, 2025, via the dark web that they had exfiltrated 20 GB of data, including corporate documents, financial records, and personal information. The breach exposed sensitive details of at least 1,118 Iowa residents, including names, Social Security numbers, and dates of birth.
Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is investigating potential legal claims for affected individuals. The firm has indicated that those impacted may be eligible for compensation. The full scope of the breach and its impact on other states remains under review.
Source: https://www.claimdepot.com/investigations/carlson-building-maintenance-data-breach-2026
Carlson Building Maintenance cybersecurity rating report: https://www.rankiteo.com/company/carlsonbuildingmaint
"id": "CAR1776443696",
"linkid": "carlsonbuildingmaint",
"type": "Ransomware",
"date": "9/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '1,118 Iowa residents',
'industry': 'Facilities services',
'location': 'Minnesota, USA',
'name': 'Carlson Building Maintenance',
'size': '250+ employees',
'type': 'Company'}],
'data_breach': {'data_exfiltration': 'Yes (20 GB of data)',
'number_of_records_exposed': '1,118',
'personally_identifiable_information': ['Names',
'Social Security '
'numbers',
'Dates of birth'],
'sensitivity_of_data': 'High (Social Security numbers, dates '
'of birth)',
'type_of_data_compromised': ['Corporate documents',
'Financial records',
'Personal information']},
'date_detected': '2025-09-22',
'date_publicly_disclosed': '2025-10-10',
'description': 'Carlson Building Maintenance, a Minnesota-based facilities '
'services provider serving retail and educational clients '
'across the Midwest, suffered a data breach after a '
'cyberattack on September 22, 2025. The Akira ransomware group '
'claimed responsibility, exfiltrating 20 GB of data, including '
'corporate documents, financial records, and personal '
'information of at least 1,118 Iowa residents.',
'impact': {'data_compromised': '20 GB of data, including corporate documents, '
'financial records, and personal information',
'identity_theft_risk': 'High (Social Security numbers and dates of '
'birth exposed)',
'legal_liabilities': 'Potential class action lawsuits'},
'investigation_status': 'Under review',
'ransomware': {'data_exfiltration': 'Yes (20 GB of data)',
'ransomware_strain': 'Akira'},
'references': [{'date_accessed': '2025-10-10',
'source': 'Dark web announcement by Akira ransomware group'}],
'regulatory_compliance': {'legal_actions': 'Potential class action lawsuits '
'(Shamis & Gentile P.A.)'},
'response': {'third_party_assistance': 'Forensic specialists engaged'},
'threat_actor': 'Akira ransomware group',
'title': 'Carlson Building Maintenance Hit by Akira Ransomware Attack, '
'Exposing Sensitive Data of Over 1,100 Iowa Residents',
'type': 'Ransomware'}