Morris Communications Data Breach: 84GB Stolen Exposing Personal Information

Morris Communications Co., a privately held media company headquartered in Augusta, Georgia, disclosed a data breach that occurred in October 2025. The total number of individuals affected by the breach has not been publicly disclosed.

Morris Communications discovered the breach on Oct. 9, 2025, and determined, through an investigation, that the breach took place between Oct. 1, 2025, and Oct. 9, 2025.

On Nov. 3, 2025, a ransomware group known as Akira claimed responsibility for the attack, posting on the dark web that it had obtained 84 gigabytes of data from Morris Communications.

According to the dark web posting, the compromised information included financial records such as audit documents, payment details and invoices. The group also claimed to have obtained employee and customer information, including passports, driver's licenses, Social Security numbers, medical information, birth and death certificates, email addresses and phone numbers, confidential business documents, including non-disclosure agreements and other files containing detailed personal information.

According to the company's own disclosure, the types of consumer information exposed in the breach included names, addresses, Social Security numbers, driver's license or other government identification card numbers, financial account information and medical information.

The company is expected to begin notifying affected consumers on or about July 17, 2026, and has posted a notice regarding the data security incident on its website.

Morris Communications' response to the breach

Anyone who receives a notification from Morris Communications should review the letter carefully. The notification may contain important details about available protections, including instructions on how to enroll in credit monitoring or other identity protection services the company may be providing.