Charles River Insurance Brokerage Hit by Akira Ransomware Attack, Exposing Sensitive Data Charles River Insurance Brokerage, a Massachusetts-based independent insurance agency serving clients since 1998, has confirmed a data breach linked to the Akira ransomware group. The incident was disclosed to the Massachusetts Attorney General’s office on December 19, 2025, though the attack was first publicized by Akira on the Tor network on April 2, 2026. The ransomware group claimed to have exfiltrated 63GB of data, including highly sensitive information such as Social Security numbers and medical records belonging to both employees and customers. The breach has so far impacted at least 232 individuals in Massachusetts, though the full extent of exposure remains unclear. Charles River Insurance Brokerage, with offices in Framingham and Leominster, specializes in personal and commercial insurance, including coverage for industries like hospitality, cannabis, and construction. The firm is now under investigation by Shamis & Gentile P.A., a class action law firm, as affected individuals may be eligible for compensation. The breach underscores the ongoing threat of ransomware attacks targeting organizations handling sensitive financial and personal data.