GS Yuasa Lithium Power — Akira leak-site listing, US aerospace battery supplier

On 28 May 2026 the Akira ransomware crew added GS Yuasa Lithium Power to its dark-web leak site. The listing carries the standard Akira preamble — corporate data will be uploaded soon — and names project data tied to Boeing satellites, contracts and agreements, drawings and specifications, and client information among the allegedly exfiltrated material. A terabyte figure is not quoted in the public version of the listing.

GS Yuasa Lithium Power is the North Carolina-based US subsidiary of Japan’s GS Yuasa Corporation, manufacturing lithium-ion battery cells for aerospace, military, undersea and industrial applications. The company’s public reference customers include Boeing, for whom it supplies cells under a long-term agreement covering, among other programmes, the ViaSat-3 commercial satellite constellation. As of publication there is no statement from GS Yuasa Lithium Power, no group-level disclosure from GS Yuasa Corporation in Tokyo, no SEC filing from any downstream prime, and no US government-customer comment publicly visible against the listing.

Akira has been operational since March 2023 and is widely assessed to belong to the post-Conti leaked-builder lineage, with reporting also connecting some of its tooling and affiliate base to the wider Storm-1567 / Howling Scorpius cluster. The crew’s prior victims have skewed towards US and EU mid-market manufacturing, professional services and healthcare, with VPN-appliance compromise, Veeam abuse and ESXi targeting recurring across its incident history. A defence-aerospace battery supplier of GS Yuasa Lithium Power’s scale would be one of the higher-profile names on the Akira board to date, although the supplier is not itself publicly listed and any direct financial-impact disclosure depends on parent-company group reporting in Tokyo.

A deep-dive will follow once GS Yuasa Lithium Power or GS Yuasa Corporation issues a formal statement, the intrusion vector is publicly characterised, the leak-site dump materialises and can be independently sampled, and any downstream prime or US government customer comments on the scope of any programme-data exposure.