Charles River Insurance Brokerage Hit by Akira Ransomware Attack, Exposing Sensitive Data
Charles River Insurance Brokerage, a Massachusetts-based independent insurance agency serving clients since 1998, has confirmed a data breach linked to the Akira ransomware group. The incident was disclosed to the Massachusetts Attorney General’s office on December 19, 2025, though the attack was first publicized by Akira on the Tor network on April 2, 2026.
The ransomware group claimed to have exfiltrated 63GB of data, including highly sensitive information such as Social Security numbers and medical records belonging to both employees and customers. The breach has so far impacted at least 232 individuals in Massachusetts, though the full extent of exposure remains unclear.
Charles River Insurance Brokerage, with offices in Framingham and Leominster, specializes in personal and commercial insurance, including coverage for industries like hospitality, cannabis, and construction. The firm is now under investigation by Shamis & Gentile P.A., a class action law firm, as affected individuals may be eligible for compensation.
The breach underscores the ongoing threat of ransomware attacks targeting organizations handling sensitive financial and personal data.
Source: https://www.claimdepot.com/investigations/charles-river-insurance-data-breach-2026
Charles River Insurance Brokerage Inc cybersecurity rating report: https://www.rankiteo.com/company/charles-river-insurance-brokerage-inc
"id": "CHA1776371410",
"linkid": "charles-river-insurance-brokerage-inc",
"type": "Ransomware",
"date": "4/2026",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '232 individuals in '
'Massachusetts',
'industry': 'Insurance',
'location': 'Framingham, Massachusetts; Leominster, '
'Massachusetts',
'name': 'Charles River Insurance Brokerage',
'type': 'Insurance Agency'}],
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'Highly sensitive',
'type_of_data_compromised': ['Social Security numbers',
'Medical records']},
'date_publicly_disclosed': '2026-04-02',
'description': 'Charles River Insurance Brokerage, a Massachusetts-based '
'independent insurance agency, confirmed a data breach linked '
'to the Akira ransomware group. The ransomware group claimed '
'to have exfiltrated 63GB of data, including Social Security '
'numbers and medical records belonging to employees and '
'customers. The breach impacted at least 232 individuals in '
'Massachusetts.',
'impact': {'data_compromised': '63GB of data',
'identity_theft_risk': 'High',
'legal_liabilities': 'Under investigation by Shamis & Gentile P.A. '
'for potential class action'},
'investigation_status': 'Ongoing',
'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'Akira'},
'references': [{'source': 'Massachusetts Attorney General’s office'},
{'source': 'Akira ransomware group (Tor network)'}],
'regulatory_compliance': {'legal_actions': 'Potential class action lawsuit',
'regulatory_notifications': 'Disclosed to '
'Massachusetts Attorney '
'General’s office on '
'2025-12-19'},
'threat_actor': 'Akira ransomware group',
'title': 'Charles River Insurance Brokerage Hit by Akira Ransomware Attack, '
'Exposing Sensitive Data',
'type': 'Ransomware'}