Easypak Data Breach Exposes Sensitive Information in Ransomware Attack
Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is investigating a ransomware attack targeting Pak Holdings, LLC (DBA Easypak), a Massachusetts-based manufacturer of thermoformed plastic packaging for industries including food, medical, and consumer goods.
On January 13, 2026, Easypak detected unauthorized access to its computer network. An investigation, assisted by external cybersecurity experts, confirmed by June 8, 2026, that sensitive files had been compromised during the breach. The attack was attributed to the Akira ransomware group, which claimed to have exfiltrated 67 GB of corporate data and posted details on the dark web on January 29, 2026.
The exposed data includes:
- Driver’s licenses
- Financial account information
- Medical records
- Personally identifiable information (PII), such as full names and Social Security numbers
At least 217 Massachusetts residents have been confirmed as affected. Easypak has not disclosed whether the incident involved ransom payment negotiations or if the stolen data has been misused. Legal representatives are evaluating potential compensation claims for impacted individuals.
Source: https://www.claimdepot.com/investigations/easypak-data-breach-2026
Easypak cybersecurity rating report: https://www.rankiteo.com/company/easypak
"id": "EAS1784140635",
"linkid": "easypak",
"type": "Ransomware",
"date": "1/2026",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '217 Massachusetts residents',
'industry': 'Manufacturing (Thermoformed plastic '
'packaging)',
'location': 'Massachusetts, USA',
'name': 'Pak Holdings, LLC (DBA Easypak)',
'type': 'Company'}],
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Full names, Social '
'Security numbers',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Driver’s licenses',
'Financial account information',
'Medical records',
'Personally identifiable '
'information (PII)']},
'date_detected': '2026-01-13',
'date_publicly_disclosed': '2026-01-29',
'description': 'Shamis & Gentile P.A. is investigating a ransomware attack '
'targeting Pak Holdings, LLC (DBA Easypak), a '
'Massachusetts-based manufacturer of thermoformed plastic '
'packaging. The attack, attributed to the Akira ransomware '
'group, resulted in the exfiltration of 67 GB of corporate '
'data, including sensitive personal and financial information.',
'impact': {'data_compromised': '67 GB of corporate data',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'investigation_status': 'Ongoing',
'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'Akira'},
'references': [{'source': 'Shamis & Gentile P.A.'}],
'regulatory_compliance': {'legal_actions': 'Potential compensation claims '
'being evaluated'},
'response': {'third_party_assistance': 'External cybersecurity experts'},
'threat_actor': 'Akira ransomware group',
'title': 'Easypak Data Breach Exposes Sensitive Information in Ransomware '
'Attack',
'type': 'Ransomware'}