Gauthier Connectique (nicomatic): 42 GB of sensitive data threatened after a cyberattack

On 6 April 2026, Gauthier Connectique — a French manufacturer of high-precision connectors for civil and military aviation, part of the Nicomatic group — was claimed as a victim by the Akira ransomware group, which added the company to its dark-web leak site and threatened to publish stolen internal data.

The attackers claimed to hold roughly 42 GB of exfiltrated corporate data and used the threat of publication as extortion leverage — a classic double-extortion tactic combining intrusion, data theft and a public countdown. Given Gauthier Connectique's position in the aerospace supply chain, the technical and commercial sensitivity of the stolen material gives the leak significant strategic value.

According to the attackers' listing, the exposed data included:

• Scanned employee identity documents (passports, driver's licenses)
• Technical drawings and product specifications
• Confidential internal files
• Financial information
• Non-disclosure agreements (NDAs)

The incident fits a broader 2025–2026 wave of ransomware and data-extortion campaigns targeting the aviation and aerospace sector. At the time of reporting, the threat to publish the data remained active and no resolution or ransom outcome had been disclosed.