CMD Outsourcing Solutions Hit by Akira Ransomware Attack, Exposing Sensitive Data CMD Outsourcing Solutions, a U.S.-based provider of administrative and customer support services for higher education institutions, suffered a ransomware attack in April 2026. The breach was first disclosed on the dark web by the Akira ransomware group on April 7, 2026, which claimed to have exfiltrated organizational data, including employee documents and financial records. The company officially reported the incident to the Vermont Attorney General’s office on May 21, 2026, confirming that Social Security numbers were among the exposed data. While the full scope of the breach remains under investigation, affected individuals may include those whose personal information was compromised. CMD Outsourcing Solutions, founded in 1999 and headquartered in Baltimore, Maryland, partners with colleges and universities to manage administrative functions such as admissions, financial aid, and housing. The incident highlights ongoing risks to third-party service providers handling sensitive institutional data.