Carlson Building Maintenance Inc. reported a security incident where an unauthorized actor accessed its network. The company became aware of a ransomware attack by the Akira ransomware group on October 10, 2025. Official notifications were sent to affected individuals on or about April 3, 2026.
The breach involved data types including names, Social Security numbers, dates of birth, financial documents, employee and customer information, passports, driver's licenses, email addresses, and phone numbers. The incident is confirmed to have affected 1,118 residents in Iowa, with potential multi-state exposure. The total number of affected individuals and specific details about the exposure remain unclear beyond the confirmed Iowa residents and the 20 GB data volume claimed by the attackers.
More details may emerge as the investigation continues, and consumer notices may be delayed.