Akira ransomware gang says it stole passport scans from Lush in 110 GB data heist

The Akira ransomware group claims to have exfiltrated approximately 110 GB of data from UK cosmetics retailer Lush, including employee passport scans and company accounting/financial documents, and is threatening publication as part of an extortion campaign; Lush has acknowledged a ransomware incident, engaged external forensic experts, notified authorities, and is investigating the extent of the impact while researchers note Akira's history of extortion-first operations and targeting of exposed remote access services.