CMD Outsourcing Solutions, a US-based company providing customer service solutions for higher education, was impacted by a ransomware attack from the Akira group on April 7, 2026. This incident was publicly claimed by Akira on the same day.
The types of data exposed include scanned employee documents such as passport numbers, driver's license numbers, SSNs, medical files, financial files, and NDAs. The attackers stated they would upload corporate data soon. The exact number of affected individuals is not specified in currently available reports. No state-level details were provided regarding impacted individuals, though the company operates in the US.
Details on the scope of the breach, remediation efforts, or victim notifications are not yet available. Sources are limited to ransomware tracking sites, and there have been no official disclosures or regulatory filings found.