akira
First seen April 26, 2023Active1,602 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| VEST LLC | March 19, 2025 | ransomware_live | — |
| LINC Systems | March 19, 2025 | ransomware_live | — |
| SAGETRA INC. | March 18, 2025 | ransomware_live | — |
| PIBOR ISO SA | March 17, 2025 | ransomware_live | — |
| Solist | March 17, 2025 | ransomware_live | — |
| Tänzer GmbH | March 17, 2025 | ransomware_live | — |
| Unicorr Packaging Group | March 14, 2025 | ransomware_live | — |
| The Ely Company, Inc. | March 14, 2025 | ransomware_live | — |
| Helmut Hölbling Spedition GmbH | March 12, 2025 | ransomware_live | — |
| Peerless Food Equipment | March 12, 2025 | ransomware_live | — |
| CNQC | March 12, 2025 | ransomware_live | — |
| Best Telecom Laos | March 12, 2025 | ransomware_live | — |
| SMG Bahamas | March 12, 2025 | ransomware_live | — |
| PACOMARTINEZ | March 12, 2025 | ransomware_live | — |
| Ascoma Group | March 12, 2025 | ransomware_live | — |
| Lamberti Group | March 12, 2025 | ransomware_live | — |
| McKenzie Commercial Contractors | March 12, 2025 | ransomware_live | — |
| Princeton Hydro | March 11, 2025 | ransomware_live | — |
| All4Labels - Global Packaging Group | March 11, 2025 | ransomware_live | — |
| Veristat | March 11, 2025 | ransomware_live | — |
| WAUGH & GOODWIN, LLP | March 11, 2025 | ransomware_live | — |
| Taking stock of February 2025 | March 11, 2025 | ransomware_live | — |
| Fickling & Company | March 10, 2025 | ransomware_live | — |
| Safe-Strap Company, LLC | March 10, 2025 | ransomware_live | — |
| Arcusin | March 10, 2025 | ransomware_live | — |
| Pacific Honda Company | March 10, 2025 | ransomware_live | — |
| Callico Distributors, Inc. | March 10, 2025 | ransomware_live | — |
| Domina Entrega Total | March 8, 2025 | ransomware_live | — |
| JAMEL CONTAINERS LLC | March 8, 2025 | ransomware_live | — |
| Dumont Telephone | March 8, 2025 | ransomware_live | — |
| Sittab INC | March 7, 2025 | ransomware_live | — |
| GPS 909 | March 7, 2025 | ransomware_live | — |
| ZB ZIMMERMANN UND BECKER GmbH | March 7, 2025 | ransomware_live | — |
| Elite Advanced Laser Corporation | March 6, 2025 | ransomware_live | — |
| UNITED OPTICS GmbH | March 6, 2025 | ransomware_live | — |
| Adrenalina | March 5, 2025 | ransomware_live | — |
| Ray Fogg Corporate Properties | March 4, 2025 | ransomware_live | — |
| FANTIN group | March 4, 2025 | ransomware_live | — |
| Marsicovetere & Levine Law Group | March 4, 2025 | ransomware_live | — |
| Forstenlechner Installationstechnik | March 3, 2025 | ransomware_live | — |
| Sunnking SustainableSolutions | March 3, 2025 | ransomware_live | — |
| Bamar Plastics, Inc. | March 3, 2025 | ransomware_live | — |
| Autohaus Kießling | February 27, 2025 | ransomware_live | — |
| Mercury Paper Inc | February 27, 2025 | ransomware_live | — |
| Praxis Eins | February 27, 2025 | ransomware_live | — |
| Meta E2 F | February 27, 2025 | ransomware_live | — |
| Indastrial Acceptance Corporation | February 27, 2025 | ransomware_live | — |
| REPROHAUS Corp | February 27, 2025 | ransomware_live | — |
| Chimu Agropecuaria S.A. | February 26, 2025 | ransomware_live | — |
| January 2025 results | February 25, 2025 | ransomware_live | — |
| MNJ Technologies Direct | February 25, 2025 | ransomware_live | — |
| Merkanti Bank Ltd | February 25, 2025 | ransomware_live | — |
| Thornton EngineeringAustralia Pty Ltd | February 24, 2025 | ransomware_live | — |
| Cronos Europa | February 24, 2025 | ransomware_live | — |
| Advantage Home Construction Insurance | February 24, 2025 | ransomware_live | — |
| Navien, Inc. | February 24, 2025 | ransomware_live | — |
| Schaltbau | February 23, 2025 | ransomware_live | — |
| Barhite & Holzinger Inc. | February 21, 2025 | ransomware_live | — |
| Paratus | February 21, 2025 | ransomware_live | — |
| Insyst GmbH | February 21, 2025 | ransomware_live | — |
| Berg Engineering Consultants, Ltd. | February 20, 2025 | ransomware_live | — |
| Minaris Medical America | February 20, 2025 | ransomware_live | — |
| Hall Law Group LLP | February 19, 2025 | ransomware_live | — |
| Vector Engineering, Inc | February 19, 2025 | ransomware_live | — |
| Südkabel GmbH | February 19, 2025 | ransomware_live | — |
| PREMIER HOUSEWARES LIMITED | February 18, 2025 | ransomware_live | — |
| Daniels Homes | February 18, 2025 | ransomware_live | — |
| Decore-Ative Specialties | February 18, 2025 | ransomware_live | — |
| Texollini | February 18, 2025 | ransomware_live | — |
| DA Capital | February 17, 2025 | ransomware_live | — |
| P.N. Sakkoulas | February 17, 2025 | ransomware_live | — |
| Woman's Athletic Club of Chicago | February 17, 2025 | ransomware_live | — |
| Thong Sia | February 17, 2025 | ransomware_live | — |
| Regency Media | February 14, 2025 | ransomware_live | — |
| Primaveras | February 14, 2025 | ransomware_live | — |
| COSMED | February 14, 2025 | ransomware_live | — |
| Elite Advanced LaserCorporation | February 12, 2025 | ransomware_live | — |
| Swift Haulage Berhad | February 12, 2025 | ransomware_live | — |
| Extreme Trailers | February 11, 2025 | ransomware_live | — |
| DesignSourceCT | February 10, 2025 | ransomware_live | — |
| Mac Jee | February 9, 2025 | ransomware_live | — |
| Quality Carton and Converting | February 9, 2025 | ransomware_live | — |
| Sterling BMW | February 8, 2025 | ransomware_live | — |
| Tropical Foods Company Inc | February 7, 2025 | ransomware_live | — |
| RFA Decor | February 7, 2025 | ransomware_live | — |
| Auren | February 7, 2025 | ransomware_live | — |
| Presence From Innovation (PFI) | February 6, 2025 | ransomware_live | — |
| Window World of Raleigh | February 6, 2025 | ransomware_live | — |
| Window Worldof Raleigh | February 6, 2025 | ransomware_live | — |
| City Plumbing & Electric Supply Co | February 6, 2025 | ransomware_live | — |
| City Plumbing & ElectricSupply Co. | February 6, 2025 | ransomware_live | — |
| Nebraska Irrigation | February 5, 2025 | ransomware_live | — |
| Taking stock of 2024| Part 2 | February 4, 2025 | ransomware_live | — |
| intercomp.com.mt | February 4, 2025 | ransomware_live | — |
| saludsa.com.ec | February 4, 2025 | ransomware_live | — |
| 360energy.com.ar | February 4, 2025 | ransomware_live | — |
| directex.net | February 4, 2025 | ransomware_live | — |
| mbacomputer.com | February 4, 2025 | ransomware_live | — |
| armellini.com | February 4, 2025 | ransomware_live | — |
| cfctech.com | February 4, 2025 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).