Carlson Building Maintenance Hit by Akira Ransomware Attack, Exposing Sensitive Data of Over 1,100 Iowa Residents Carlson Building Maintenance, a Minnesota-based facilities services provider serving retail and educational clients across the Midwest, suffered a data breach after a cyberattack on September 22, 2025. The company, which employs over 250 people, detected unauthorized access to its network and engaged third-party forensic specialists to investigate. The Akira ransomware group claimed responsibility for the attack, announcing on October 10, 2025, via the dark web that they had exfiltrated 20 GB of data, including corporate documents, financial records, and personal information. The breach exposed sensitive details of at least 1,118 Iowa residents, including names, Social Security numbers, and dates of birth. Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is investigating potential legal claims for affected individuals. The firm has indicated that those impacted may be eligible for compensation. The full scope of the breach and its impact on other states remains under review.