akira
First seen April 26, 2023Active1,671 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| GPS 909 | March 7, 2025 | ransomware_live | — |
| ZB ZIMMERMANN UND BECKER GmbH | March 7, 2025 | ransomware_live | — |
| Elite Advanced Laser Corporation | March 6, 2025 | ransomware_live | — |
| UNITED OPTICS GmbH | March 6, 2025 | ransomware_live | — |
| Adrenalina | March 5, 2025 | ransomware_live | — |
| Ray Fogg Corporate Properties | March 4, 2025 | ransomware_live | — |
| FANTIN group | March 4, 2025 | ransomware_live | — |
| Marsicovetere & Levine Law Group | March 4, 2025 | ransomware_live | — |
| Forstenlechner Installationstechnik | March 3, 2025 | ransomware_live | — |
| Sunnking SustainableSolutions | March 3, 2025 | ransomware_live | — |
| Bamar Plastics, Inc. | March 3, 2025 | ransomware_live | — |
| Autohaus Kießling | February 27, 2025 | ransomware_live | — |
| Mercury Paper Inc | February 27, 2025 | ransomware_live | — |
| Praxis Eins | February 27, 2025 | ransomware_live | — |
| Meta E2 F | February 27, 2025 | ransomware_live | — |
| Indastrial Acceptance Corporation | February 27, 2025 | ransomware_live | — |
| REPROHAUS Corp | February 27, 2025 | ransomware_live | — |
| Chimu Agropecuaria S.A. | February 26, 2025 | ransomware_live | — |
| January 2025 results | February 25, 2025 | ransomware_live | — |
| MNJ Technologies Direct | February 25, 2025 | ransomware_live | — |
| Merkanti Bank Ltd | February 25, 2025 | ransomware_live | — |
| Thornton EngineeringAustralia Pty Ltd | February 24, 2025 | ransomware_live | — |
| Cronos Europa | February 24, 2025 | ransomware_live | — |
| Advantage Home Construction Insurance | February 24, 2025 | ransomware_live | — |
| Navien, Inc. | February 24, 2025 | ransomware_live | — |
| Schaltbau | February 23, 2025 | ransomware_live | — |
| Barhite & Holzinger Inc. | February 21, 2025 | ransomware_live | — |
| Paratus | February 21, 2025 | ransomware_live | — |
| Insyst GmbH | February 21, 2025 | ransomware_live | — |
| Berg Engineering Consultants, Ltd. | February 20, 2025 | ransomware_live | — |
| Minaris Medical America | February 20, 2025 | ransomware_live | — |
| Hall Law Group LLP | February 19, 2025 | ransomware_live | — |
| Vector Engineering, Inc | February 19, 2025 | ransomware_live | — |
| Südkabel GmbH | February 19, 2025 | ransomware_live | — |
| PREMIER HOUSEWARES LIMITED | February 18, 2025 | ransomware_live | — |
| Daniels Homes | February 18, 2025 | ransomware_live | — |
| Decore-Ative Specialties | February 18, 2025 | ransomware_live | — |
| Texollini | February 18, 2025 | ransomware_live | — |
| DA Capital | February 17, 2025 | ransomware_live | — |
| P.N. Sakkoulas | February 17, 2025 | ransomware_live | — |
| Woman's Athletic Club of Chicago | February 17, 2025 | ransomware_live | — |
| Thong Sia | February 17, 2025 | ransomware_live | — |
| Regency Media | February 14, 2025 | ransomware_live | — |
| Primaveras | February 14, 2025 | ransomware_live | — |
| COSMED | February 14, 2025 | ransomware_live | — |
| Elite Advanced LaserCorporation | February 12, 2025 | ransomware_live | — |
| Swift Haulage Berhad | February 12, 2025 | ransomware_live | — |
| Extreme Trailers | February 11, 2025 | ransomware_live | — |
| DesignSourceCT | February 10, 2025 | ransomware_live | — |
| Mac Jee | February 9, 2025 | ransomware_live | — |
| Quality Carton and Converting | February 9, 2025 | ransomware_live | — |
| Sterling BMW | February 8, 2025 | ransomware_live | — |
| Tropical Foods Company Inc | February 7, 2025 | ransomware_live | — |
| RFA Decor | February 7, 2025 | ransomware_live | — |
| Auren | February 7, 2025 | ransomware_live | — |
| Presence From Innovation (PFI) | February 6, 2025 | ransomware_live | — |
| Window World of Raleigh | February 6, 2025 | ransomware_live | — |
| Window Worldof Raleigh | February 6, 2025 | ransomware_live | — |
| City Plumbing & Electric Supply Co | February 6, 2025 | ransomware_live | — |
| City Plumbing & ElectricSupply Co. | February 6, 2025 | ransomware_live | — |
| Nebraska Irrigation | February 5, 2025 | ransomware_live | — |
| Taking stock of 2024| Part 2 | February 4, 2025 | ransomware_live | — |
| intercomp.com.mt | February 4, 2025 | ransomware_live | — |
| saludsa.com.ec | February 4, 2025 | ransomware_live | — |
| 360energy.com.ar | February 4, 2025 | ransomware_live | — |
| directex.net | February 4, 2025 | ransomware_live | — |
| mbacomputer.com | February 4, 2025 | ransomware_live | — |
| armellini.com | February 4, 2025 | ransomware_live | — |
| cfctech.com | February 4, 2025 | ransomware_live | — |
| elitt-sas.fr | February 4, 2025 | ransomware_live | — |
| viscira.com | February 4, 2025 | ransomware_live | — |
| westernwoodsinc.com | February 4, 2025 | ransomware_live | — |
| alfa.com.co | February 4, 2025 | ransomware_live | — |
| easycom.com | February 4, 2025 | ransomware_live | — |
| dwgp.com | February 4, 2025 | ransomware_live | — |
| summitmovinghouston.com | February 4, 2025 | ransomware_live | — |
| jsfrental.com | February 4, 2025 | ransomware_live | — |
| milleraa.com | February 4, 2025 | ransomware_live | — |
| stewartautosales.com | February 4, 2025 | ransomware_live | — |
| feheq.com | February 4, 2025 | ransomware_live | — |
| usm-americas.com | February 4, 2025 | ransomware_live | — |
| mipa.com.br | February 4, 2025 | ransomware_live | — |
| acesaz.com | February 4, 2025 | ransomware_live | — |
| premierop.com | February 4, 2025 | ransomware_live | — |
| alphascriptrx.com | February 4, 2025 | ransomware_live | — |
| emin.cl | February 4, 2025 | ransomware_live | — |
| engineeredequip.com | February 4, 2025 | ransomware_live | — |
| mielectric.com.br | February 4, 2025 | ransomware_live | — |
| CoMo-Industrial Engineering | February 4, 2025 | ransomware_live | — |
| Luminus Management | February 4, 2025 | ransomware_live | — |
| worldfabricinc.com | January 31, 2025 | ransomware_live | — |
| JFGV.ca | January 31, 2025 | ransomware_live | — |
| atlanticelectrics.com | January 31, 2025 | ransomware_live | — |
| cannara.ca | January 31, 2025 | ransomware_live | — |
| njcar.org | January 31, 2025 | ransomware_live | — |
| yhti.com | January 31, 2025 | ransomware_live | — |
| dkgrar.com | January 31, 2025 | ransomware_live | — |
| calfaucets.com | January 31, 2025 | ransomware_live | — |
| atr.com | January 31, 2025 | ransomware_live | — |
| simcointeriors.com | January 31, 2025 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).