akira
First seen April 26, 2023Active1,671 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| OTR | May 28, 2024 | ransomware_live | — |
| Brett Slater Solicitors | May 28, 2024 | ransomware_live | — |
| Avelina | May 28, 2024 | ransomware_live | — |
| Ocean Park Mechanical | May 27, 2024 | ransomware_live | — |
| Vannguard Utility Partners | May 24, 2024 | ransomware_live | — |
| GRANVILLE FOOD CARE LIMITED | May 22, 2024 | ransomware_live | — |
| IZOMAT Praha | May 22, 2024 | ransomware_live | — |
| Newman Ferrara | May 22, 2024 | ransomware_live | — |
| Marigin | May 20, 2024 | ransomware_live | — |
| Bruno generators (Italian manufacturing) | May 14, 2024 | ransomware_live | — |
| Fiskars Group | May 14, 2024 | ransomware_live | — |
| Reading Electric | May 10, 2024 | ransomware_live | — |
| M2E Consulting Engineers | May 6, 2024 | ransomware_live | — |
| Imedi L | May 2, 2024 | ransomware_live | — |
| tudio Libeskind | April 30, 2024 | ransomware_live | — |
| GCH Hotel Group | April 30, 2024 | ransomware_live | — |
| Studio Libeskind | April 30, 2024 | ransomware_live | — |
| Myers Automotive Group | April 18, 2024 | ransomware_live | — |
| Serfilco, RP Adams, Baron Blakeslee, Pacer, Service Filtration of Canada, Polymar. | April 17, 2024 | ransomware_live | — |
| Studio LAMBDA | April 16, 2024 | ransomware_live | — |
| Lotz Trucking | April 16, 2024 | ransomware_live | — |
| Medequip Assistive Technology | April 16, 2024 | ransomware_live | — |
| Wright Brothers Construction | April 16, 2024 | ransomware_live | — |
| Best Reward Federal Credit Union | April 15, 2024 | ransomware_live | — |
| Snchez-Betances Sifre & Muñoz-Noya | April 12, 2024 | ransomware_live | — |
| Missouri Electric Cooperatives | April 11, 2024 | ransomware_live | — |
| Samart | April 10, 2024 | ransomware_live | — |
| Consilux (Brazil) | April 9, 2024 | ransomware_live | — |
| REV Drill Sales & Rentals | April 8, 2024 | ransomware_live | — |
| PGF Technology Group | April 8, 2024 | ransomware_live | — |
| Radiant Canada | April 4, 2024 | ransomware_live | — |
| Inspection Services | April 4, 2024 | ransomware_live | — |
| Control Technology | March 29, 2024 | ransomware_live | — |
| Santa Cruz Seaside | March 28, 2024 | ransomware_live | — |
| Lakes Precision | March 28, 2024 | ransomware_live | — |
| Mermet | March 27, 2024 | ransomware_live | — |
| Tanis Brush | March 26, 2024 | ransomware_live | — |
| Koi Design | March 26, 2024 | ransomware_live | — |
| European Centre for Compensation | March 25, 2024 | ransomware_live | — |
| Vita IT | March 25, 2024 | ransomware_live | — |
| Calida | March 25, 2024 | ransomware_live | — |
| SKS Bottle &Packaging | March 24, 2024 | ransomware_live | — |
| Summit Almonds | March 13, 2024 | ransomware_live | — |
| Steiner (Austrian furniture makers) | March 6, 2024 | ransomware_live | — |
| Telecentro | March 6, 2024 | ransomware_live | — |
| Medical Billing Specialists | March 6, 2024 | ransomware_live | — |
| Infosoft | March 6, 2024 | ransomware_live | — |
| America Chung Nam orACN | March 4, 2024 | ransomware_live | — |
| Gansevoort Hotel Group | March 1, 2024 | ransomware_live | — |
| CoreData | March 1, 2024 | ransomware_live | — |
| DTN Management Company | February 28, 2024 | ransomware_live | — |
| Bjuvs kommun | February 26, 2024 | ransomware_live | — |
| PEER Consultants | February 22, 2024 | ransomware_live | — |
| Quik Pawn Shop | February 22, 2024 | ransomware_live | — |
| Desarrollo De Tecnologia y Sistemas Ltda | February 21, 2024 | ransomware_live | — |
| Lancaster | February 21, 2024 | ransomware_live | — |
| BRAM Auto Group | February 16, 2024 | ransomware_live | — |
| Asam | February 15, 2024 | ransomware_live | — |
| Live Aquaria | February 15, 2024 | ransomware_live | — |
| Nekoosa School District | February 14, 2024 | ransomware_live | — |
| Sanok Rubber CompanySpólka Akcyjna | February 13, 2024 | ransomware_live | — |
| Distecna | February 8, 2024 | ransomware_live | — |
| Celeste | February 6, 2024 | ransomware_live | — |
| AVer Information | February 6, 2024 | ransomware_live | — |
| VCS Observation | February 5, 2024 | ransomware_live | — |
| Borah Goldstein Altschuler Nahins & Goidel | February 1, 2024 | ransomware_live | — |
| Financoop | February 1, 2024 | ransomware_live | — |
| Sefin | January 31, 2024 | ransomware_live | — |
| TeraGo | January 31, 2024 | ransomware_live | — |
| Safe Plating | January 29, 2024 | ransomware_live | — |
| Get Away Today | January 29, 2024 | ransomware_live | — |
| Castilleja School | January 29, 2024 | ransomware_live | — |
| Valley TeleCom Group | January 26, 2024 | ransomware_live | — |
| Brazilian Business Park | January 26, 2024 | ransomware_live | — |
| Toronto Zoo | January 25, 2024 | ransomware_live | — |
| ANI Networks | January 25, 2024 | ransomware_live | — |
| Lush | January 25, 2024 | ransomware_live | — |
| Dirig Sheet Metal | January 24, 2024 | ransomware_live | — |
| Milestone Environmental Contracting | January 23, 2024 | ransomware_live | — |
| Wilhoit Properties | January 23, 2024 | ransomware_live | — |
| Cryopak | January 23, 2024 | ransomware_live | — |
| Hydratek | January 19, 2024 | ransomware_live | — |
| DENHAM the Jeanmaker | January 17, 2024 | ransomware_live | — |
| Premium Guard | January 16, 2024 | ransomware_live | — |
| TGS Transportation | January 16, 2024 | ransomware_live | — |
| Bestway Sales | January 16, 2024 | ransomware_live | — |
| Becker Logistics | January 16, 2024 | ransomware_live | — |
| Vincentz Network | January 11, 2024 | ransomware_live | — |
| Blackburn College | January 11, 2024 | ransomware_live | — |
| Ito Pallpack Gruppen | January 9, 2024 | ransomware_live | — |
| Viridi | January 9, 2024 | ransomware_live | — |
| Heller Industries | January 8, 2024 | ransomware_live | — |
| Van Buren Public Schools | January 8, 2024 | ransomware_live | — |
| International Electronic Machines Corp | December 25, 2023 | ransomware_live | — |
| Hamilton-Madison House | December 24, 2023 | ransomware_live | — |
| Nissan Australia | December 22, 2023 | ransomware_live | — |
| Nexiga | December 15, 2023 | ransomware_live | — |
| Hyman Hayes Associates | December 14, 2023 | ransomware_live | — |
| The Teaching Company, LLC | December 12, 2023 | ransomware_live | — |
| Mitrani Caballero Ojam & Ruiz Moreno - Abogados | December 12, 2023 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).