akira
First seen April 26, 2023Active1,602 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Stransky Heiz-Mess-Regeltechnik GmbH | September 4, 2026 | ransomlook | — |
| Worrell | September 4, 2026 | ransomlook | — |
| PennFab | September 2, 2026 | ransomlook | — |
| Algra Group | September 2, 2026 | ransomlook | — |
| ScrubaDub Auto Wash Centers | September 2, 2026 | ransomlook | — |
| Congressional Iron Works | September 1, 2026 | ransomlook | — |
| BYK Construction | September 1, 2026 | ransomlook | — |
| Flex1 | September 1, 2026 | ransomlook | — |
| KFZ-MEISTERBETRIEB JOST GmbH | August 31, 2026 | ransomlook | — |
| Gale Credit Union | August 31, 2026 | ransomlook | — |
| WEMS | August 31, 2026 | ransomlook | — |
| Alumax | August 28, 2026 | ransomware_live | — |
| JRT Mechanical | August 28, 2026 | ransomlook | — |
| BEPeterson | August 28, 2026 | ransomlook | — |
| Seabrook Island | August 27, 2026 | ransomlook | — |
| CGP MEP | August 27, 2026 | ransomlook | — |
| Cetylite | August 27, 2026 | ransomlook | — |
| PA-ID | August 26, 2026 | ransomlook | — |
| Oral and Maxillofacial Surgery | August 26, 2026 | ransomlook | — |
| Gill Rock Drill | August 26, 2026 | ransomlook | — |
| Davis & Ferber | August 25, 2026 | ransomware_live | — |
| WINTER Ingenieure | August 25, 2026 | ransomware_live | — |
| Bihl | August 24, 2026 | ransomware_live | — |
| Deas Millwork | August 20, 2026 | ransomware_live | — |
| Ericksen Krentel | August 19, 2026 | ransomware_live | — |
| Borchert & LaSpina | August 18, 2026 | ransomware_live | — |
| Gill Rock Drill | August 14, 2026 | ransomware_live | — |
| CF Supply | August 13, 2026 | ransomware_live | — |
| WINTER Ingenieure | August 11, 2026 | ransomware_live | — |
| i4 Solutions | August 10, 2026 | ransomware_live | — |
| Alcast | August 10, 2026 | ransomware_live | — |
| Gale Credit Union | August 7, 2026 | ransomware_live | — |
| Cetylite | August 6, 2026 | ransomware_live | — |
| Pharma Test Apparatebau AG | August 6, 2026 | ransomware_live | — |
| Basic Grain Products | August 6, 2026 | ransomware_live | — |
| University SprinklerSystems | August 4, 2026 | ransomware_live | — |
| Cozad Asset Management | August 4, 2026 | ransomware_live | — |
| Seabrook Island | July 31, 2026 | ransomware_live | — |
| Cascade Coffee | July 30, 2026 | ransomware_live | — |
| Keystops | July 29, 2026 | ransomware_live | — |
| Franz Krause artworksgroup | July 28, 2026 | ransomware_live | — |
| One Vision Imaging | July 28, 2026 | ransomware_live | — |
| Albers Mechanical Contractors | July 27, 2026 | ransomware_live | — |
| BYK Construction | July 24, 2026 | ransomware_live | — |
| Belasco Electric | July 24, 2026 | ransomware_live | — |
| University Sprinkler Systems | July 22, 2026 | ransomware_live | — |
| Kruse Construction | July 22, 2026 | ransomware_live | — |
| Finer & Finer | July 21, 2026 | ransomware_live | — |
| Novasport s.r.o. | July 21, 2026 | ransomware_live | — |
| Pioneer Construction | July 15, 2026 | ransomware_live | — |
| Ironmark | July 13, 2026 | ransomware_live | — |
| Vandalia Rental | July 10, 2026 | ransomware_live | — |
| Transworld Signs | July 10, 2026 | ransomware_live | — |
| JC Sales | July 10, 2026 | ransomware_live | — |
| Nesco Bus Maintenance | July 9, 2026 | ransomware_live | — |
| Northwood Country Club | July 9, 2026 | ransomware_live | — |
| Wade's Dairy | July 8, 2026 | ransomware_live | — |
| Stone Ridge Payments | July 7, 2026 | ransomware_live | — |
| Excalibur Rentals | July 7, 2026 | ransomware_live | — |
| Chisholm Persson & Ball | July 7, 2026 | ransomware_live | — |
| RISE Architecture | July 7, 2026 | ransomware_live | — |
| L&A Transport | July 3, 2026 | ransomware_live | — |
| McKeever , Varga & Senko | July 2, 2026 | ransomware_live | — |
| Refinery Hotel | July 1, 2026 | ransomware_live | — |
| Emerge2 Digital | July 1, 2026 | ransomware_live | — |
| Advanced Business Systems | June 30, 2026 | ransomware_live | — |
| About Todd Hamaker & Johnson | June 30, 2026 | ransomware_live | — |
| Westcoast Communication Services | June 30, 2026 | ransomware_live | — |
| Precise Forms | June 26, 2026 | ransomware_live | — |
| Miami Machine | June 24, 2026 | ransomware_live | — |
| Jit Ex | June 24, 2026 | ransomware_live | — |
| Ntd Apparel | June 22, 2026 | ransomware_live | — |
| Apptricity | June 18, 2026 | ransomware_live | — |
| Berg Lilly | June 18, 2026 | ransomware_live | — |
| Smith Filter | June 17, 2026 | ransomware_live | — |
| Insite Architects | June 16, 2026 | ransomware_live | — |
| DDC Domus Design Collection | June 12, 2026 | ransomware_live | — |
| Associated Investor Services | June 10, 2026 | ransomware_live | — |
| The Midland Theatre | June 10, 2026 | ransomware_live | — |
| Port Air Express | June 10, 2026 | ransomware_live | — |
| Centre Ellipse | June 9, 2026 | ransomware_live | — |
| SMPC Architects | June 9, 2026 | ransomware_live | — |
| Rockaway River Country Club | June 9, 2026 | ransomware_live | — |
| Spray Equipment & Service Center | June 9, 2026 | ransomware_live | — |
| HRC Sicherheitsdienste | June 8, 2026 | ransomware_live | — |
| T/CCI Manufacturing | June 5, 2026 | ransomware_live | — |
| Kennon Worldwide | June 5, 2026 | ransomware_live | — |
| Northern Ohio Regional Multiple Listing Service | June 4, 2026 | ransomware_live | — |
| National Standard Parts Associates | June 4, 2026 | ransomware_live | — |
| Padget Technologies | June 4, 2026 | ransomware_live | — |
| Hal Otey Financial | June 3, 2026 | ransomware_live | — |
| Factors Western | June 3, 2026 | ransomware_live | — |
| Cherokee Distributing Co | June 3, 2026 | ransomware_live | — |
| Sunrise, Toscana Country Club, AndalusiaCountry Club. | June 3, 2026 | ransomware_live | — |
| JMS Southeast | June 2, 2026 | ransomware_live | — |
| Interstate Roofing | May 29, 2026 | ransomware_live | — |
| IH Engineers | May 29, 2026 | ransomware_live | — |
| Gone Fishin' Marine | May 27, 2026 | ransomware_live | — |
| Northwest Woodworks | May 27, 2026 | ransomware_live | — |
| Sunrise, Toscana Country Club,Andalusia Country Club. | May 26, 2026 | ransomware_live | — |
Page 1 of 17Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).