akira
First seen April 26, 2023Active1,602 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Gallos Metal Solutions | June 26, 2024 | ransomware_live | — |
| Ocasa | June 26, 2024 | ransomware_live | — |
| Utility Datacenter | June 25, 2024 | ransomware_live | — |
| Beckett Thermal Solutions | June 25, 2024 | ransomware_live | — |
| PCI Developments | June 25, 2024 | ransomware_live | — |
| Agron (Five Ten) Adidas TERREX | June 24, 2024 | ransomware_live | — |
| Salton | June 24, 2024 | ransomware_live | — |
| Amino Transport | June 24, 2024 | ransomware_live | — |
| Perfumes & Companhia | June 19, 2024 | ransomware_live | — |
| Lindermayr | June 19, 2024 | ransomware_live | — |
| TETRA Technologies, Inc. | June 17, 2024 | ransomware_live | — |
| Wright Engineers | June 16, 2024 | ransomware_live | — |
| New Balance Commodities | June 14, 2024 | ransomware_live | — |
| Duplo USA | June 13, 2024 | ransomware_live | — |
| IPM Group (Multimedia Information & Production Company) | June 12, 2024 | ransomware_live | — |
| Arge Baustahl | June 10, 2024 | ransomware_live | — |
| Hager Group | June 8, 2024 | ransomware_live | — |
| HUTTER ACUSTIX | June 8, 2024 | ransomware_live | — |
| Reinhold Sign Service | June 7, 2024 | ransomware_live | — |
| Panasonic Australia | June 6, 2024 | ransomware_live | — |
| E-T-A | June 5, 2024 | ransomware_live | — |
| Mahindra Racing | June 4, 2024 | ransomware_live | — |
| Zillertal Bier | June 4, 2024 | ransomware_live | — |
| Anderson Mikos Architects | June 3, 2024 | ransomware_live | — |
| New Hampshire PublicRadio | May 31, 2024 | ransomware_live | — |
| TriLiteral | May 31, 2024 | ransomware_live | — |
| MagicLand | May 30, 2024 | ransomware_live | — |
| Excel Security Corp. | May 30, 2024 | ransomware_live | — |
| DreamWall | May 30, 2024 | ransomware_live | — |
| Faultless Brands | May 30, 2024 | ransomware_live | — |
| Western Dovetail | May 29, 2024 | ransomware_live | — |
| OTR | May 28, 2024 | ransomware_live | — |
| Brett Slater Solicitors | May 28, 2024 | ransomware_live | — |
| Avelina | May 28, 2024 | ransomware_live | — |
| Ocean Park Mechanical | May 27, 2024 | ransomware_live | — |
| Vannguard Utility Partners | May 24, 2024 | ransomware_live | — |
| GRANVILLE FOOD CARE LIMITED | May 22, 2024 | ransomware_live | — |
| IZOMAT Praha | May 22, 2024 | ransomware_live | — |
| Newman Ferrara | May 22, 2024 | ransomware_live | — |
| Marigin | May 20, 2024 | ransomware_live | — |
| Bruno generators (Italian manufacturing) | May 14, 2024 | ransomware_live | — |
| Fiskars Group | May 14, 2024 | ransomware_live | — |
| Reading Electric | May 10, 2024 | ransomware_live | — |
| M2E Consulting Engineers | May 6, 2024 | ransomware_live | — |
| Imedi L | May 2, 2024 | ransomware_live | — |
| tudio Libeskind | April 30, 2024 | ransomware_live | — |
| GCH Hotel Group | April 30, 2024 | ransomware_live | — |
| Studio Libeskind | April 30, 2024 | ransomware_live | — |
| Myers Automotive Group | April 18, 2024 | ransomware_live | — |
| Serfilco, RP Adams, Baron Blakeslee, Pacer, Service Filtration of Canada, Polymar. | April 17, 2024 | ransomware_live | — |
| Studio LAMBDA | April 16, 2024 | ransomware_live | — |
| Lotz Trucking | April 16, 2024 | ransomware_live | — |
| Medequip Assistive Technology | April 16, 2024 | ransomware_live | — |
| Wright Brothers Construction | April 16, 2024 | ransomware_live | — |
| Best Reward Federal Credit Union | April 15, 2024 | ransomware_live | — |
| Snchez-Betances Sifre & Muñoz-Noya | April 12, 2024 | ransomware_live | — |
| Missouri Electric Cooperatives | April 11, 2024 | ransomware_live | — |
| Samart | April 10, 2024 | ransomware_live | — |
| Consilux (Brazil) | April 9, 2024 | ransomware_live | — |
| REV Drill Sales & Rentals | April 8, 2024 | ransomware_live | — |
| PGF Technology Group | April 8, 2024 | ransomware_live | — |
| Radiant Canada | April 4, 2024 | ransomware_live | — |
| Inspection Services | April 4, 2024 | ransomware_live | — |
| Control Technology | March 29, 2024 | ransomware_live | — |
| Santa Cruz Seaside | March 28, 2024 | ransomware_live | — |
| Lakes Precision | March 28, 2024 | ransomware_live | — |
| Mermet | March 27, 2024 | ransomware_live | — |
| Tanis Brush | March 26, 2024 | ransomware_live | — |
| Koi Design | March 26, 2024 | ransomware_live | — |
| European Centre for Compensation | March 25, 2024 | ransomware_live | — |
| Vita IT | March 25, 2024 | ransomware_live | — |
| Calida | March 25, 2024 | ransomware_live | — |
| SKS Bottle &Packaging | March 24, 2024 | ransomware_live | — |
| Summit Almonds | March 13, 2024 | ransomware_live | — |
| Steiner (Austrian furniture makers) | March 6, 2024 | ransomware_live | — |
| Telecentro | March 6, 2024 | ransomware_live | — |
| Medical Billing Specialists | March 6, 2024 | ransomware_live | — |
| Infosoft | March 6, 2024 | ransomware_live | — |
| America Chung Nam orACN | March 4, 2024 | ransomware_live | — |
| Gansevoort Hotel Group | March 1, 2024 | ransomware_live | — |
| CoreData | March 1, 2024 | ransomware_live | — |
| DTN Management Company | February 28, 2024 | ransomware_live | — |
| Bjuvs kommun | February 26, 2024 | ransomware_live | — |
| PEER Consultants | February 22, 2024 | ransomware_live | — |
| Quik Pawn Shop | February 22, 2024 | ransomware_live | — |
| Desarrollo De Tecnologia y Sistemas Ltda | February 21, 2024 | ransomware_live | — |
| Lancaster | February 21, 2024 | ransomware_live | — |
| BRAM Auto Group | February 16, 2024 | ransomware_live | — |
| Asam | February 15, 2024 | ransomware_live | — |
| Live Aquaria | February 15, 2024 | ransomware_live | — |
| Nekoosa School District | February 14, 2024 | ransomware_live | — |
| Sanok Rubber CompanySpólka Akcyjna | February 13, 2024 | ransomware_live | — |
| Distecna | February 8, 2024 | ransomware_live | — |
| Celeste | February 6, 2024 | ransomware_live | — |
| AVer Information | February 6, 2024 | ransomware_live | — |
| VCS Observation | February 5, 2024 | ransomware_live | — |
| Borah Goldstein Altschuler Nahins & Goidel | February 1, 2024 | ransomware_live | — |
| Financoop | February 1, 2024 | ransomware_live | — |
| Sefin | January 31, 2024 | ransomware_live | — |
| TeraGo | January 31, 2024 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).