Easypak Data Breach Exposes Sensitive Personal Information of Massachusetts Residents
Easypak, a Massachusetts-based thermoformed plastic packaging manufacturer operating as G-Pak Holdings LLC, disclosed a data breach that may have compromised the personal information of individuals linked to the company. The breach, detected on January 13, 2026, involved unauthorized access to Easypak’s network. By January 29, 2026, the ransomware group Akira claimed responsibility, posting on the dark web that it had exfiltrated 67 gigabytes of corporate data.
An investigation concluded on June 8, 2026, confirming that files containing personally identifiable information (PII) including full names, Social Security numbers, driver’s license details, financial account data, and medical records were accessed without authorization. At least 217 Massachusetts residents were identified as affected.
In response, Easypak is offering complimentary credit monitoring services to impacted individuals, along with guidance on placing fraud alerts, security freezes, and obtaining free credit reports. A dedicated call center (978-537-5683, Ext. 1003) was established for inquiries, operating 8 a.m. to 8 p.m. ET, Monday through Friday, for 90 days following notification.
Source: https://www.claimdepot.com/data-breach/easypak-2026
Easypak, LLC cybersecurity rating report: https://www.rankiteo.com/company/easypak-llc
"id": "EAS1784147231",
"linkid": "easypak-llc",
"type": "Ransomware",
"date": "1/2026",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '217 Massachusetts residents',
'industry': 'Manufacturing (Plastic Packaging)',
'location': 'Massachusetts, USA',
'name': 'Easypak (G-Pak Holdings LLC)',
'type': 'Corporation'}],
'attack_vector': 'Unauthorized network access',
'customer_advisories': 'Complimentary credit monitoring services, guidance on '
'fraud alerts, security freezes, and free credit '
'reports',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Full names',
'Social Security numbers',
'Driver’s license details',
'Financial account data',
'Medical records']},
'date_detected': '2026-01-13',
'date_resolved': '2026-06-08',
'description': 'Easypak, a Massachusetts-based thermoformed plastic packaging '
'manufacturer operating as G-Pak Holdings LLC, disclosed a '
'data breach that may have compromised the personal '
'information of individuals linked to the company. The breach '
'involved unauthorized access to Easypak’s network, with the '
'ransomware group Akira claiming responsibility and '
'exfiltrating 67 gigabytes of corporate data. Files containing '
'personally identifiable information (PII) were accessed '
'without authorization.',
'impact': {'data_compromised': '67 gigabytes of corporate data',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'investigation_status': 'Concluded',
'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'Akira'},
'recommendations': 'Offering complimentary credit monitoring services, '
'guidance on placing fraud alerts, security freezes, and '
'obtaining free credit reports',
'references': [{'source': 'Incident disclosure'}],
'response': {'communication_strategy': 'Dedicated call center (978-537-5683, '
'Ext. 1003), operating 8 a.m. to 8 '
'p.m. ET, Monday through Friday for 90 '
'days'},
'threat_actor': 'Akira',
'title': 'Easypak Data Breach Exposes Sensitive Personal Information of '
'Massachusetts Residents',
'type': 'Data Breach, Ransomware'}