akira
First seen April 26, 2023Active1,602 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Safe Plating | January 29, 2024 | ransomware_live | — |
| Get Away Today | January 29, 2024 | ransomware_live | — |
| Castilleja School | January 29, 2024 | ransomware_live | — |
| Valley TeleCom Group | January 26, 2024 | ransomware_live | — |
| Brazilian Business Park | January 26, 2024 | ransomware_live | — |
| Toronto Zoo | January 25, 2024 | ransomware_live | — |
| ANI Networks | January 25, 2024 | ransomware_live | — |
| Lush | January 25, 2024 | ransomware_live | — |
| Dirig Sheet Metal | January 24, 2024 | ransomware_live | — |
| Milestone Environmental Contracting | January 23, 2024 | ransomware_live | — |
| Wilhoit Properties | January 23, 2024 | ransomware_live | — |
| Cryopak | January 23, 2024 | ransomware_live | — |
| Hydratek | January 19, 2024 | ransomware_live | — |
| DENHAM the Jeanmaker | January 17, 2024 | ransomware_live | — |
| Premium Guard | January 16, 2024 | ransomware_live | — |
| TGS Transportation | January 16, 2024 | ransomware_live | — |
| Bestway Sales | January 16, 2024 | ransomware_live | — |
| Becker Logistics | January 16, 2024 | ransomware_live | — |
| Vincentz Network | January 11, 2024 | ransomware_live | — |
| Blackburn College | January 11, 2024 | ransomware_live | — |
| Ito Pallpack Gruppen | January 9, 2024 | ransomware_live | — |
| Viridi | January 9, 2024 | ransomware_live | — |
| Heller Industries | January 8, 2024 | ransomware_live | — |
| Van Buren Public Schools | January 8, 2024 | ransomware_live | — |
| International Electronic Machines Corp | December 25, 2023 | ransomware_live | — |
| Hamilton-Madison House | December 24, 2023 | ransomware_live | — |
| Nissan Australia | December 22, 2023 | ransomware_live | — |
| Nexiga | December 15, 2023 | ransomware_live | — |
| Hyman Hayes Associates | December 14, 2023 | ransomware_live | — |
| The Teaching Company, LLC | December 12, 2023 | ransomware_live | — |
| Mitrani Caballero Ojam & Ruiz Moreno - Abogados | December 12, 2023 | ransomware_live | — |
| SmartWave Technologies | December 12, 2023 | ransomware_live | — |
| Studio MF | December 11, 2023 | ransomware_live | — |
| Goiasa | December 11, 2023 | ransomware_live | — |
| MSD Information technology | December 11, 2023 | ransomware_live | — |
| Tasteful Selections | December 7, 2023 | ransomware_live | — |
| Aqualectra Holdings | December 6, 2023 | ransomware_live | — |
| Compass Group Italia | December 6, 2023 | ransomware_live | — |
| Midea Carrier | December 4, 2023 | ransomware_live | — |
| Bern Hotels & Resorts | December 3, 2023 | ransomware_live | — |
| Iptor | December 1, 2023 | ransomware_live | — |
| Bauwerk Boen Group | November 30, 2023 | ransomware_live | — |
| Wakefield & Associates | November 30, 2023 | ransomware_live | — |
| Teleflora | November 29, 2023 | ransomware_live | — |
| Servicio Móvil | November 29, 2023 | ransomware_live | — |
| Alpura | November 29, 2023 | ransomware_live | — |
| Lydall, Inc. | November 29, 2023 | ransomware_live | — |
| Legacy Mail Management | November 27, 2023 | ransomware_live | — |
| IQ Supply Solutions | November 22, 2023 | ransomware_live | — |
| Custom Engineering &Fabrication, Inc. | November 22, 2023 | ransomware_live | — |
| Alspec | November 22, 2023 | ransomware_live | — |
| ATC SA | November 17, 2023 | ransomware_live | — |
| Metro MPLS | November 17, 2023 | ransomware_live | — |
| Simons Petroleum/Maxum Petroleum/Pilot Thomas Logistics | November 9, 2023 | ransomware_live | — |
| Autocommerce | November 9, 2023 | ransomware_live | — |
| City Furniture Hire | November 9, 2023 | ransomware_live | — |
| Battle Motors (CraneCarrier, CCC) | November 9, 2023 | ransomware_live | — |
| SALUS Controls | November 9, 2023 | ransomware_live | — |
| Michael Garron Hospital | November 8, 2023 | ransomware_live | — |
| BITZER | November 7, 2023 | ransomware_live | — |
| BioPower SustainableEnergy Corporation | November 7, 2023 | ransomware_live | — |
| Patriotisk Selskab | October 31, 2023 | ransomware_live | — |
| Freeman Johnson | October 30, 2023 | ransomware_live | — |
| Stanford University | October 27, 2023 | ransomware_live | — |
| CMC Group | October 24, 2023 | ransomware_live | — |
| Getrix | October 24, 2023 | ransomware_live | — |
| Protector Fire Services | October 20, 2023 | ransomware_live | — |
| Southland IntegratedServices | October 20, 2023 | ransomware_live | — |
| Royal College of Physicians and Surgeonsof Glasgow | October 20, 2023 | ransomware_live | — |
| QuadraNet Enterprises | October 19, 2023 | ransomware_live | — |
| Inventum Øst | October 19, 2023 | ransomware_live | — |
| Visionary Integration Professionals | October 19, 2023 | ransomware_live | — |
| Bergeron LLC | October 15, 2023 | ransomware_live | — |
| REV Engineering | October 15, 2023 | ransomware_live | — |
| Action COACH | October 10, 2023 | ransomware_live | — |
| Healix | October 7, 2023 | ransomware_live | — |
| Terwilliger Land Survey Engineers | October 5, 2023 | ransomware_live | — |
| Gruskin Group | October 4, 2023 | ransomware_live | — |
| Vertical Development | September 29, 2023 | ransomware_live | — |
| The Polish AmericanAssociation | September 27, 2023 | ransomware_live | — |
| Civic San Diego | September 27, 2023 | ransomware_live | — |
| CLX Logistics | September 22, 2023 | ransomware_live | — |
| Fuji Seal International (US branch) | September 18, 2023 | ransomware_live | — |
| Glovis America | September 18, 2023 | ransomware_live | — |
| American Steel & Aluminum | September 14, 2023 | ransomware_live | — |
| Accuride | September 12, 2023 | ransomware_live | — |
| Jack Resnick & Sons | September 12, 2023 | ransomware_live | — |
| Energy One | September 6, 2023 | ransomware_live | — |
| Rivers Casino | August 31, 2023 | ransomware_live | — |
| Children's Home of Wyoming Conference | August 31, 2023 | ransomware_live | — |
| New York & Company | August 31, 2023 | ransomware_live | — |
| Renton School District | August 30, 2023 | ransomware_live | — |
| O'Brien Steel Service | August 30, 2023 | ransomware_live | — |
| Cutler-Smith | August 28, 2023 | ransomware_live | — |
| Voss Enterprises, Divvies | August 28, 2023 | ransomware_live | — |
| Penny Publications | August 28, 2023 | ransomware_live | — |
| Intertek | August 28, 2023 | ransomware_live | — |
| Jasper High School | August 28, 2023 | ransomware_live | — |
| Edmonds School District | August 24, 2023 | ransomware_live | — |
| The Clifton Public Schools | August 17, 2023 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).