akira
First seen April 26, 2023Active1,602 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| elitt-sas.fr | February 4, 2025 | ransomware_live | — |
| viscira.com | February 4, 2025 | ransomware_live | — |
| westernwoodsinc.com | February 4, 2025 | ransomware_live | — |
| alfa.com.co | February 4, 2025 | ransomware_live | — |
| easycom.com | February 4, 2025 | ransomware_live | — |
| dwgp.com | February 4, 2025 | ransomware_live | — |
| summitmovinghouston.com | February 4, 2025 | ransomware_live | — |
| jsfrental.com | February 4, 2025 | ransomware_live | — |
| milleraa.com | February 4, 2025 | ransomware_live | — |
| stewartautosales.com | February 4, 2025 | ransomware_live | — |
| feheq.com | February 4, 2025 | ransomware_live | — |
| usm-americas.com | February 4, 2025 | ransomware_live | — |
| mipa.com.br | February 4, 2025 | ransomware_live | — |
| acesaz.com | February 4, 2025 | ransomware_live | — |
| premierop.com | February 4, 2025 | ransomware_live | — |
| alphascriptrx.com | February 4, 2025 | ransomware_live | — |
| emin.cl | February 4, 2025 | ransomware_live | — |
| engineeredequip.com | February 4, 2025 | ransomware_live | — |
| mielectric.com.br | February 4, 2025 | ransomware_live | — |
| CoMo-Industrial Engineering | February 4, 2025 | ransomware_live | — |
| Luminus Management | February 4, 2025 | ransomware_live | — |
| worldfabricinc.com | January 31, 2025 | ransomware_live | — |
| JFGV.ca | January 31, 2025 | ransomware_live | — |
| atlanticelectrics.com | January 31, 2025 | ransomware_live | — |
| cannara.ca | January 31, 2025 | ransomware_live | — |
| njcar.org | January 31, 2025 | ransomware_live | — |
| yhti.com | January 31, 2025 | ransomware_live | — |
| dkgrar.com | January 31, 2025 | ransomware_live | — |
| calfaucets.com | January 31, 2025 | ransomware_live | — |
| atr.com | January 31, 2025 | ransomware_live | — |
| simcointeriors.com | January 31, 2025 | ransomware_live | — |
| madisonforms.com | January 31, 2025 | ransomware_live | — |
| scrantonrealtors.org | January 31, 2025 | ransomware_live | — |
| isisecurity.com | January 31, 2025 | ransomware_live | — |
| sgbllp.com | January 31, 2025 | ransomware_live | — |
| ad.snadc.com | January 31, 2025 | ransomware_live | — |
| clarkpower.com | January 31, 2025 | ransomware_live | — |
| allbrightcotton.com | January 31, 2025 | ransomware_live | — |
| idrefjall.com | January 31, 2025 | ransomware_live | — |
| swissit.cz | January 31, 2025 | ransomware_live | — |
| irisib.com | January 31, 2025 | ransomware_live | — |
| foxconstructiongroup.co.uk | January 31, 2025 | ransomware_live | — |
| elf.uk.com | January 31, 2025 | ransomware_live | — |
| farmatodo.com | January 31, 2025 | ransomware_live | — |
| omniflow.com | January 31, 2025 | ransomware_live | — |
| rqsi.com | January 31, 2025 | ransomware_live | — |
| teligentems.com | January 31, 2025 | ransomware_live | — |
| centerracoop.com | January 31, 2025 | ransomware_live | — |
| andrewlauren.com | January 31, 2025 | ransomware_live | — |
| garcesfruit.com | January 31, 2025 | ransomware_live | — |
| empereon-constar.com | January 31, 2025 | ransomware_live | — |
| rightofwayequipment.net | January 31, 2025 | ransomware_live | — |
| adhydraclean.com | January 31, 2025 | ransomware_live | — |
| Taking stock of 2024 | Part 1 | January 31, 2025 | ransomware_live | — |
| vanguardpaints.com | January 31, 2025 | ransomware_live | — |
| Benuta | January 30, 2025 | ransomware_live | — |
| Perfect Plastic | January 30, 2025 | ransomware_live | — |
| Machu Picchu Foods | January 29, 2025 | ransomware_live | — |
| Machu PicchuFoods | January 29, 2025 | ransomware_live | — |
| Klampfer Elektroanlagen | January 29, 2025 | ransomware_live | — |
| QCN CO., LTD | January 28, 2025 | ransomware_live | — |
| Mark Resolve Inc | January 27, 2025 | ransomware_live | — |
| Grand Fire Protection | January 27, 2025 | ransomware_live | — |
| Enghouse (ex. Navita) | January 23, 2025 | ransomware_live | — |
| Hayloft Property Management | January 22, 2025 | ransomware_live | — |
| Architects West | January 22, 2025 | ransomware_live | — |
| NG-BLU Networks | January 22, 2025 | ransomware_live | — |
| Genus | January 22, 2025 | ransomware_live | — |
| Prime Trust Financial | January 21, 2025 | ransomware_live | — |
| Vicky Foods | January 21, 2025 | ransomware_live | — |
| Ondunova | January 21, 2025 | ransomware_live | — |
| Beasley & Gilkison | January 21, 2025 | ransomware_live | — |
| The Pawn | January 16, 2025 | ransomware_live | — |
| Cyncly Company | January 16, 2025 | ransomware_live | — |
| Mark ResolveInc | January 15, 2025 | ransomware_live | — |
| Allen & Pinnix | January 15, 2025 | ransomware_live | — |
| Nelson & Townsend, CPA's | January 15, 2025 | ransomware_live | — |
| Castle Rock Construction Company | January 13, 2025 | ransomware_live | — |
| Castle Rock ConstructionCompany | January 13, 2025 | ransomware_live | — |
| Metalmatrix Clamps | January 10, 2025 | ransomware_live | — |
| Capesesp | January 10, 2025 | ransomware_live | — |
| Thomas J. Henry Law | January 10, 2025 | ransomware_live | — |
| Peikko | January 10, 2025 | ransomware_live | — |
| WorldNet Telecommunications LLC | January 10, 2025 | ransomware_live | — |
| Menway | January 10, 2025 | ransomware_live | — |
| Permoda | January 9, 2025 | ransomware_live | — |
| Old National Events Plaza | January 9, 2025 | ransomware_live | — |
| Old NationalEvents Plaza | January 9, 2025 | ransomware_live | — |
| Drivestream | January 7, 2025 | ransomware_live | — |
| Action Imports | January 6, 2025 | ransomware_live | — |
| Bluegrass Ingredients | January 6, 2025 | ransomware_live | — |
| Go Strictly | January 2, 2025 | ransomware_live | — |
| PJ's Rebar | December 28, 2024 | ransomware_live | — |
| MLP Tax & Financial Services | December 26, 2024 | ransomware_live | — |
| Ichikawa North America Corporation | December 26, 2024 | ransomware_live | — |
| Mercy Supply Collaborative | December 25, 2024 | ransomware_live | — |
| Dan Eckman CPA | December 25, 2024 | ransomware_live | — |
| Mercy SupplyCollaborative | December 25, 2024 | ransomware_live | — |
| Billet Precision | December 23, 2024 | ransomware_live | — |
| Chain And Rope Suppliers LTD | December 23, 2024 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).