akira
First seen April 26, 2023Active1,671 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| madisonforms.com | January 31, 2025 | ransomware_live | — |
| scrantonrealtors.org | January 31, 2025 | ransomware_live | — |
| isisecurity.com | January 31, 2025 | ransomware_live | — |
| sgbllp.com | January 31, 2025 | ransomware_live | — |
| ad.snadc.com | January 31, 2025 | ransomware_live | — |
| clarkpower.com | January 31, 2025 | ransomware_live | — |
| allbrightcotton.com | January 31, 2025 | ransomware_live | — |
| idrefjall.com | January 31, 2025 | ransomware_live | — |
| swissit.cz | January 31, 2025 | ransomware_live | — |
| irisib.com | January 31, 2025 | ransomware_live | — |
| foxconstructiongroup.co.uk | January 31, 2025 | ransomware_live | — |
| elf.uk.com | January 31, 2025 | ransomware_live | — |
| farmatodo.com | January 31, 2025 | ransomware_live | — |
| omniflow.com | January 31, 2025 | ransomware_live | — |
| rqsi.com | January 31, 2025 | ransomware_live | — |
| teligentems.com | January 31, 2025 | ransomware_live | — |
| centerracoop.com | January 31, 2025 | ransomware_live | — |
| andrewlauren.com | January 31, 2025 | ransomware_live | — |
| garcesfruit.com | January 31, 2025 | ransomware_live | — |
| empereon-constar.com | January 31, 2025 | ransomware_live | — |
| rightofwayequipment.net | January 31, 2025 | ransomware_live | — |
| adhydraclean.com | January 31, 2025 | ransomware_live | — |
| Taking stock of 2024 | Part 1 | January 31, 2025 | ransomware_live | — |
| vanguardpaints.com | January 31, 2025 | ransomware_live | — |
| Benuta | January 30, 2025 | ransomware_live | — |
| Perfect Plastic | January 30, 2025 | ransomware_live | — |
| Machu Picchu Foods | January 29, 2025 | ransomware_live | — |
| Machu PicchuFoods | January 29, 2025 | ransomware_live | — |
| Klampfer Elektroanlagen | January 29, 2025 | ransomware_live | — |
| QCN CO., LTD | January 28, 2025 | ransomware_live | — |
| Mark Resolve Inc | January 27, 2025 | ransomware_live | — |
| Grand Fire Protection | January 27, 2025 | ransomware_live | — |
| Enghouse (ex. Navita) | January 23, 2025 | ransomware_live | — |
| Hayloft Property Management | January 22, 2025 | ransomware_live | — |
| Architects West | January 22, 2025 | ransomware_live | — |
| NG-BLU Networks | January 22, 2025 | ransomware_live | — |
| Genus | January 22, 2025 | ransomware_live | — |
| Prime Trust Financial | January 21, 2025 | ransomware_live | — |
| Vicky Foods | January 21, 2025 | ransomware_live | — |
| Ondunova | January 21, 2025 | ransomware_live | — |
| Beasley & Gilkison | January 21, 2025 | ransomware_live | — |
| The Pawn | January 16, 2025 | ransomware_live | — |
| Cyncly Company | January 16, 2025 | ransomware_live | — |
| Mark ResolveInc | January 15, 2025 | ransomware_live | — |
| Allen & Pinnix | January 15, 2025 | ransomware_live | — |
| Nelson & Townsend, CPA's | January 15, 2025 | ransomware_live | — |
| Castle Rock Construction Company | January 13, 2025 | ransomware_live | — |
| Castle Rock ConstructionCompany | January 13, 2025 | ransomware_live | — |
| Metalmatrix Clamps | January 10, 2025 | ransomware_live | — |
| Capesesp | January 10, 2025 | ransomware_live | — |
| Thomas J. Henry Law | January 10, 2025 | ransomware_live | — |
| Peikko | January 10, 2025 | ransomware_live | — |
| WorldNet Telecommunications LLC | January 10, 2025 | ransomware_live | — |
| Menway | January 10, 2025 | ransomware_live | — |
| Permoda | January 9, 2025 | ransomware_live | — |
| Old National Events Plaza | January 9, 2025 | ransomware_live | — |
| Old NationalEvents Plaza | January 9, 2025 | ransomware_live | — |
| Drivestream | January 7, 2025 | ransomware_live | — |
| Action Imports | January 6, 2025 | ransomware_live | — |
| Bluegrass Ingredients | January 6, 2025 | ransomware_live | — |
| Go Strictly | January 2, 2025 | ransomware_live | — |
| PJ's Rebar | December 28, 2024 | ransomware_live | — |
| MLP Tax & Financial Services | December 26, 2024 | ransomware_live | — |
| Ichikawa North America Corporation | December 26, 2024 | ransomware_live | — |
| Mercy Supply Collaborative | December 25, 2024 | ransomware_live | — |
| Dan Eckman CPA | December 25, 2024 | ransomware_live | — |
| Mercy SupplyCollaborative | December 25, 2024 | ransomware_live | — |
| Billet Precision | December 23, 2024 | ransomware_live | — |
| Chain And Rope Suppliers LTD | December 23, 2024 | ransomware_live | — |
| Chain And Rope SuppliersLTD | December 23, 2024 | ransomware_live | — |
| Drywall Partitions | December 20, 2024 | ransomware_live | — |
| Divimast | December 20, 2024 | ransomware_live | — |
| Leyman Manufacturing | December 19, 2024 | ransomware_live | — |
| Jared Beschel and Associates | December 19, 2024 | ransomware_live | — |
| Fullmer Construction | December 18, 2024 | ransomware_live | — |
| Black Oak Casino Resort | December 18, 2024 | ransomware_live | — |
| OL Products | December 18, 2024 | ransomware_live | — |
| Ramos Law | December 18, 2024 | ransomware_live | — |
| Polskie Wydawnictwo Muzyczne | December 17, 2024 | ransomware_live | — |
| Toscano Law | December 17, 2024 | ransomware_live | — |
| A Geradora | December 17, 2024 | ransomware_live | — |
| Diedrich Coffee | December 17, 2024 | ransomware_live | — |
| Diferencial Energia | December 16, 2024 | ransomware_live | — |
| Rob Levine & Associates | December 16, 2024 | ransomware_live | — |
| Great Plains Bank | December 16, 2024 | ransomware_live | — |
| Time Machine Inc | December 16, 2024 | ransomware_live | — |
| Beyond79 | December 16, 2024 | ransomware_live | — |
| Rio Negro | December 14, 2024 | ransomware_live | — |
| Pinno Construction | December 14, 2024 | ransomware_live | — |
| Luxor Capital Group | December 13, 2024 | ransomware_live | — |
| An independent private assets manager | December 13, 2024 | ransomware_live | — |
| Maverick Constructors | December 13, 2024 | ransomware_live | — |
| Northern Lights Electric | December 13, 2024 | ransomware_live | — |
| Slawson Companies | December 12, 2024 | ransomware_live | — |
| Nova Pole International Inc. | December 11, 2024 | ransomware_live | — |
| Renée Blanche | December 11, 2024 | ransomware_live | — |
| Matagrano | December 11, 2024 | ransomware_live | — |
| Archie Cochrane Ford | December 11, 2024 | ransomware_live | — |
| Lakeside Sod Supply | December 10, 2024 | ransomware_live | — |
| Aruba Productions | December 10, 2024 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).