Easypak Data Breach Exposes Sensitive Information in Ransomware Attack Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is investigating a ransomware attack targeting Pak Holdings, LLC (DBA Easypak), a Massachusetts-based manufacturer of thermoformed plastic packaging for industries including food, medical, and consumer goods. On January 13, 2026, Easypak detected unauthorized access to its computer network. An investigation, assisted by external cybersecurity experts, confirmed by June 8, 2026, that sensitive files had been compromised during the breach. The attack was attributed to the Akira ransomware group, which claimed to have exfiltrated 67 GB of corporate data and posted details on the dark web on January 29, 2026. The exposed data includes: - Driver’s licenses - Financial account information - Medical records - Personally identifiable information (PII), such as full names and Social Security numbers At least 217 Massachusetts residents have been confirmed as affected. Easypak has not disclosed whether the incident involved ransom payment negotiations or if the stolen data has been misused. Legal representatives are evaluating potential compensation claims for impacted individuals.