akira
First seen April 26, 2023Active1,671 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Hillandale Farms | September 19, 2024 | ransomware_live | — |
| Rengo Packaging | September 14, 2024 | ransomware_live | — |
| AACANet | September 11, 2024 | ransomware_live | — |
| Vickers Engineering | September 10, 2024 | ransomware_live | — |
| Colwell Colour (colwellcolour.com) | September 6, 2024 | ransomware_live | — |
| Cellular Plus | September 5, 2024 | ransomware_live | — |
| SWISS CZ | September 5, 2024 | ransomware_live | — |
| Imetame | September 5, 2024 | ransomware_live | — |
| Baird Mandalas Brockstedt LLC | September 5, 2024 | ransomware_live | — |
| Maxus Group | September 2, 2024 | ransomware_live | — |
| 4QuartersIT | August 31, 2024 | ransomware_live | — |
| Guard1 | August 30, 2024 | ransomware_live | — |
| Allegheny Millwork & Lumber | August 29, 2024 | ransomware_live | — |
| MONVIA Holding, a.s. | August 29, 2024 | ransomware_live | — |
| Bulbrite Industries | August 25, 2024 | ransomware_live | — |
| Monster Electrical | August 23, 2024 | ransomware_live | — |
| Snelling Paper & Sanitation | August 23, 2024 | ransomware_live | — |
| Lucid Corp | August 23, 2024 | ransomware_live | — |
| Falvey LinenSupply | August 22, 2024 | ransomware_live | — |
| Datron WorldCommunications | August 22, 2024 | ransomware_live | — |
| McFarlane, Inc. | August 22, 2024 | ransomware_live | — |
| McFarlane | August 22, 2024 | ransomware_live | — |
| HOERBIGER Holding | August 21, 2024 | ransomware_live | — |
| Jinny Corporation | August 21, 2024 | ransomware_live | — |
| H2OBX Waterpark | August 21, 2024 | ransomware_live | — |
| North Georgia Brick | August 20, 2024 | ransomware_live | — |
| Irr Supply Centers | August 20, 2024 | ransomware_live | — |
| The Transit Authority of Northern Kentucky (TANK) | August 19, 2024 | ransomware_live | — |
| HTT Packaging & Design | August 19, 2024 | ransomware_live | — |
| Ocean BeautySeafoods | August 15, 2024 | ransomware_live | — |
| Boni | August 14, 2024 | ransomware_live | — |
| TRC Worldwide Engineering (Trcww) | August 14, 2024 | ransomware_live | — |
| Yazoo ValleyElectric Power Assosiation | August 9, 2024 | ransomware_live | — |
| Travis Pruitt & Associates | August 2, 2024 | ransomware_live | — |
| Magguilli Law Firm,PPLC | August 2, 2024 | ransomware_live | — |
| Peñoles | August 1, 2024 | ransomware_live | — |
| BRASPRESS | July 31, 2024 | ransomware_live | — |
| Find Great People | July 31, 2024 | ransomware_live | — |
| SAGE Publishing | July 30, 2024 | ransomware_live | — |
| Olschewski Davie | July 30, 2024 | ransomware_live | — |
| Macadam Europe | July 30, 2024 | ransomware_live | — |
| Volo Internet Tech | July 28, 2024 | ransomware_live | — |
| Empereon Constar | July 25, 2024 | ransomware_live | — |
| Environmental Design International | July 25, 2024 | ransomware_live | — |
| El Dorado Stores and Supermarkets | July 25, 2024 | ransomware_live | — |
| CALDAN Conveyor | July 24, 2024 | ransomware_live | — |
| Electroalfa | July 24, 2024 | ransomware_live | — |
| American Acryl | July 24, 2024 | ransomware_live | — |
| SKC West | July 24, 2024 | ransomware_live | — |
| Win Systems | July 23, 2024 | ransomware_live | — |
| Notarkammer Pfalz | July 23, 2024 | ransomware_live | — |
| siParadigm | July 23, 2024 | ransomware_live | — |
| Lotus Concepts Management | July 17, 2024 | ransomware_live | — |
| Sigma | July 11, 2024 | ransomware_live | — |
| Usina Alta Mogiana S/A | July 10, 2024 | ransomware_live | — |
| P448 | July 10, 2024 | ransomware_live | — |
| Heidmar | July 9, 2024 | ransomware_live | — |
| Inland Audio Visual | July 9, 2024 | ransomware_live | — |
| Federated Co-operatives | July 8, 2024 | ransomware_live | — |
| Esedra | July 8, 2024 | ransomware_live | — |
| Allied Industrial Group | July 8, 2024 | ransomware_live | — |
| Alimac | July 3, 2024 | ransomware_live | — |
| Explomin | July 3, 2024 | ransomware_live | — |
| Conexus Medstaff | July 2, 2024 | ransomware_live | — |
| P1 Technologies | July 2, 2024 | ransomware_live | — |
| SYNERGY PEANUT | July 1, 2024 | ransomware_live | — |
| Wilmots (Legal services) | June 28, 2024 | ransomware_live | — |
| Power Lube Industrial | June 28, 2024 | ransomware_live | — |
| Waterbury Newton | June 26, 2024 | ransomware_live | — |
| Gallos Metal Solutions | June 26, 2024 | ransomware_live | — |
| Ocasa | June 26, 2024 | ransomware_live | — |
| Utility Datacenter | June 25, 2024 | ransomware_live | — |
| Beckett Thermal Solutions | June 25, 2024 | ransomware_live | — |
| PCI Developments | June 25, 2024 | ransomware_live | — |
| Agron (Five Ten) Adidas TERREX | June 24, 2024 | ransomware_live | — |
| Salton | June 24, 2024 | ransomware_live | — |
| Amino Transport | June 24, 2024 | ransomware_live | — |
| Perfumes & Companhia | June 19, 2024 | ransomware_live | — |
| Lindermayr | June 19, 2024 | ransomware_live | — |
| TETRA Technologies, Inc. | June 17, 2024 | ransomware_live | — |
| Wright Engineers | June 16, 2024 | ransomware_live | — |
| New Balance Commodities | June 14, 2024 | ransomware_live | — |
| Duplo USA | June 13, 2024 | ransomware_live | — |
| IPM Group (Multimedia Information & Production Company) | June 12, 2024 | ransomware_live | — |
| Arge Baustahl | June 10, 2024 | ransomware_live | — |
| Hager Group | June 8, 2024 | ransomware_live | — |
| HUTTER ACUSTIX | June 8, 2024 | ransomware_live | — |
| Reinhold Sign Service | June 7, 2024 | ransomware_live | — |
| Panasonic Australia | June 6, 2024 | ransomware_live | — |
| E-T-A | June 5, 2024 | ransomware_live | — |
| Mahindra Racing | June 4, 2024 | ransomware_live | — |
| Zillertal Bier | June 4, 2024 | ransomware_live | — |
| Anderson Mikos Architects | June 3, 2024 | ransomware_live | — |
| New Hampshire PublicRadio | May 31, 2024 | ransomware_live | — |
| TriLiteral | May 31, 2024 | ransomware_live | — |
| MagicLand | May 30, 2024 | ransomware_live | — |
| Excel Security Corp. | May 30, 2024 | ransomware_live | — |
| DreamWall | May 30, 2024 | ransomware_live | — |
| Faultless Brands | May 30, 2024 | ransomware_live | — |
| Western Dovetail | May 29, 2024 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).