akira
First seen April 26, 2023Active1,602 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Chain And Rope SuppliersLTD | December 23, 2024 | ransomware_live | — |
| Drywall Partitions | December 20, 2024 | ransomware_live | — |
| Divimast | December 20, 2024 | ransomware_live | — |
| Leyman Manufacturing | December 19, 2024 | ransomware_live | — |
| Jared Beschel and Associates | December 19, 2024 | ransomware_live | — |
| Fullmer Construction | December 18, 2024 | ransomware_live | — |
| Black Oak Casino Resort | December 18, 2024 | ransomware_live | — |
| OL Products | December 18, 2024 | ransomware_live | — |
| Ramos Law | December 18, 2024 | ransomware_live | — |
| Polskie Wydawnictwo Muzyczne | December 17, 2024 | ransomware_live | — |
| Toscano Law | December 17, 2024 | ransomware_live | — |
| A Geradora | December 17, 2024 | ransomware_live | — |
| Diedrich Coffee | December 17, 2024 | ransomware_live | — |
| Diferencial Energia | December 16, 2024 | ransomware_live | — |
| Rob Levine & Associates | December 16, 2024 | ransomware_live | — |
| Great Plains Bank | December 16, 2024 | ransomware_live | — |
| Time Machine Inc | December 16, 2024 | ransomware_live | — |
| Beyond79 | December 16, 2024 | ransomware_live | — |
| Rio Negro | December 14, 2024 | ransomware_live | — |
| Pinno Construction | December 14, 2024 | ransomware_live | — |
| Luxor Capital Group | December 13, 2024 | ransomware_live | — |
| An independent private assets manager | December 13, 2024 | ransomware_live | — |
| Maverick Constructors | December 13, 2024 | ransomware_live | — |
| Northern Lights Electric | December 13, 2024 | ransomware_live | — |
| Slawson Companies | December 12, 2024 | ransomware_live | — |
| Nova Pole International Inc. | December 11, 2024 | ransomware_live | — |
| Renée Blanche | December 11, 2024 | ransomware_live | — |
| Matagrano | December 11, 2024 | ransomware_live | — |
| Archie Cochrane Ford | December 11, 2024 | ransomware_live | — |
| Lakeside Sod Supply | December 10, 2024 | ransomware_live | — |
| Aruba Productions | December 10, 2024 | ransomware_live | — |
| Conrey Insurance Brokers & Risk Managers | December 10, 2024 | ransomware_live | — |
| Matandy (matandy.com) | December 10, 2024 | ransomware_live | — |
| AAA Environmental | December 10, 2024 | ransomware_live | — |
| Consumers Builders Supply | December 9, 2024 | ransomware_live | — |
| Cipla | December 9, 2024 | ransomware_live | — |
| Proyectos y Seguros | December 9, 2024 | ransomware_live | — |
| Good Neighbors Credit Union | December 9, 2024 | ransomware_live | — |
| Los Andes | December 9, 2024 | ransomware_live | — |
| Weinberg & Schwartz LLC | December 6, 2024 | ransomware_live | — |
| Pb Loader | December 6, 2024 | ransomware_live | — |
| Pelstar | December 6, 2024 | ransomware_live | — |
| National Air Vibrator | December 6, 2024 | ransomware_live | — |
| VO Baker | December 6, 2024 | ransomware_live | — |
| A Bar A Ranch | December 6, 2024 | ransomware_live | — |
| Union Studio | December 6, 2024 | ransomware_live | — |
| National AirVibrator | December 6, 2024 | ransomware_live | — |
| Séguin Haché SENCRL | December 5, 2024 | ransomware_live | — |
| Davis Immigration Law Office | December 5, 2024 | ransomware_live | — |
| Billet Precision (billetprecision.ca) | December 5, 2024 | ransomware_live | — |
| Galfer | December 5, 2024 | ransomware_live | — |
| Moinho Globo Alimentos | December 5, 2024 | ransomware_live | — |
| C Pathe | December 4, 2024 | ransomware_live | — |
| Charlie’s Tax Service | December 4, 2024 | ransomware_live | — |
| Surface Combustion | December 4, 2024 | ransomware_live | — |
| VODOTEHNIKA D.D. | December 3, 2024 | ransomware_live | — |
| REIMERS FURNITURE MFG INC | December 1, 2024 | ransomware_live | — |
| Tillamook Country Smoker (tcsmoker.com) | November 29, 2024 | ransomware_live | — |
| Tillamook Country Smoker | November 29, 2024 | ransomware_live | — |
| Gunnar Prefab | November 29, 2024 | ransomware_live | — |
| Bennett Porter Wealth Management Insurance | November 27, 2024 | ransomware_live | — |
| Co-op Agro Centre | November 27, 2024 | ransomware_live | — |
| Aviosupport | November 27, 2024 | ransomware_live | — |
| Brookway Landscape &Irrigation | November 27, 2024 | ransomware_live | — |
| Packard Machinery | November 27, 2024 | ransomware_live | — |
| Pražské služby | November 27, 2024 | ransomware_live | — |
| Sanderson Stewart | November 26, 2024 | ransomware_live | — |
| Thomas Greg & Sons Ltda | November 26, 2024 | ransomware_live | — |
| AMI Consulting Engineers | November 26, 2024 | ransomware_live | — |
| Wadsworth Solutions | November 26, 2024 | ransomware_live | — |
| Hide-A-Way Lake Club | November 26, 2024 | ransomware_live | — |
| ProCaps Laboratories | November 26, 2024 | ransomware_live | — |
| Polykar | November 26, 2024 | ransomware_live | — |
| MSR Group | November 25, 2024 | ransomware_live | — |
| Kay & Burton | November 25, 2024 | ransomware_live | — |
| Summit Hosting | November 25, 2024 | ransomware_live | — |
| Astor Chocolate | November 25, 2024 | ransomware_live | — |
| Touchstone Home Products | November 25, 2024 | ransomware_live | — |
| Inteleca | November 24, 2024 | ransomware_live | — |
| Metal Finishing | November 22, 2024 | ransomware_live | — |
| First Chatham Bank | November 22, 2024 | ransomware_live | — |
| Traffics | November 21, 2024 | ransomware_live | — |
| North Shore Systems | November 21, 2024 | ransomware_live | — |
| Plastic Recycling | November 21, 2024 | ransomware_live | — |
| Skopos | November 21, 2024 | ransomware_live | — |
| Ship Services | November 20, 2024 | ransomware_live | — |
| Tampa State Bank | November 20, 2024 | ransomware_live | — |
| Find Great People1 | November 19, 2024 | ransomware_live | — |
| Corporación BJR | November 16, 2024 | ransomware_live | — |
| Don’s MobileGlass | November 14, 2024 | ransomware_live | — |
| Tedkomp AB | November 14, 2024 | ransomware_live | — |
| Ascend Packaging Systems | November 14, 2024 | ransomware_live | — |
| Xtrim TVCable | November 14, 2024 | ransomware_live | — |
| Berexco LLC | November 13, 2024 | ransomware_live | — |
| Followmont TransportPty Ltd | November 11, 2024 | ransomware_live | — |
| E-Tank | November 8, 2024 | ransomware_live | — |
| Milwaukee Cylinder | November 7, 2024 | ransomware_live | — |
| Freightlinerof Savannah | November 6, 2024 | ransomware_live | — |
| Press Color | November 6, 2024 | ransomware_live | — |
| James H Maloy | November 5, 2024 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).