On July 10, 2026, the Akira ransomware group listed Vandalia Rental on its leak site and claimed to have stolen 40GB of corporate data. The alleged stolen data includes Social Security Numbers (SSNs), dates of birth (DOB), financial records, contracts, and project data.
As of July 11, 2026, Vandalia Rental has not published any official breach notification letter or issued any public statement regarding the incident. There are no state Attorney General filings or class action lawsuits related to this incident. The number of affected individuals and the specific states affected remain unconfirmed. It is also unknown if Vandalia Rental is publicly traded or its estimated revenue. There is no evidence indicating this was a vendor or third-party breach.
Until official disclosures are made by the company or regulatory bodies, the details surrounding this breach, including the types and volume of data allegedly stolen, are based solely on unconfirmed claims by the ransomware group. Further details may emerge as the situation develops.