akira
First seen April 26, 2023Active1,671 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| SmartWave Technologies | December 12, 2023 | ransomware_live | — |
| Studio MF | December 11, 2023 | ransomware_live | — |
| Goiasa | December 11, 2023 | ransomware_live | — |
| MSD Information technology | December 11, 2023 | ransomware_live | — |
| Tasteful Selections | December 7, 2023 | ransomware_live | — |
| Aqualectra Holdings | December 6, 2023 | ransomware_live | — |
| Compass Group Italia | December 6, 2023 | ransomware_live | — |
| Midea Carrier | December 4, 2023 | ransomware_live | — |
| Bern Hotels & Resorts | December 3, 2023 | ransomware_live | — |
| Iptor | December 1, 2023 | ransomware_live | — |
| Bauwerk Boen Group | November 30, 2023 | ransomware_live | — |
| Wakefield & Associates | November 30, 2023 | ransomware_live | — |
| Teleflora | November 29, 2023 | ransomware_live | — |
| Servicio Móvil | November 29, 2023 | ransomware_live | — |
| Alpura | November 29, 2023 | ransomware_live | — |
| Lydall, Inc. | November 29, 2023 | ransomware_live | — |
| Legacy Mail Management | November 27, 2023 | ransomware_live | — |
| IQ Supply Solutions | November 22, 2023 | ransomware_live | — |
| Custom Engineering &Fabrication, Inc. | November 22, 2023 | ransomware_live | — |
| Alspec | November 22, 2023 | ransomware_live | — |
| ATC SA | November 17, 2023 | ransomware_live | — |
| Metro MPLS | November 17, 2023 | ransomware_live | — |
| Simons Petroleum/Maxum Petroleum/Pilot Thomas Logistics | November 9, 2023 | ransomware_live | — |
| Autocommerce | November 9, 2023 | ransomware_live | — |
| City Furniture Hire | November 9, 2023 | ransomware_live | — |
| Battle Motors (CraneCarrier, CCC) | November 9, 2023 | ransomware_live | — |
| SALUS Controls | November 9, 2023 | ransomware_live | — |
| Michael Garron Hospital | November 8, 2023 | ransomware_live | — |
| BITZER | November 7, 2023 | ransomware_live | — |
| BioPower SustainableEnergy Corporation | November 7, 2023 | ransomware_live | — |
| Patriotisk Selskab | October 31, 2023 | ransomware_live | — |
| Freeman Johnson | October 30, 2023 | ransomware_live | — |
| Stanford University | October 27, 2023 | ransomware_live | — |
| CMC Group | October 24, 2023 | ransomware_live | — |
| Getrix | October 24, 2023 | ransomware_live | — |
| Protector Fire Services | October 20, 2023 | ransomware_live | — |
| Southland IntegratedServices | October 20, 2023 | ransomware_live | — |
| Royal College of Physicians and Surgeonsof Glasgow | October 20, 2023 | ransomware_live | — |
| QuadraNet Enterprises | October 19, 2023 | ransomware_live | — |
| Inventum Øst | October 19, 2023 | ransomware_live | — |
| Visionary Integration Professionals | October 19, 2023 | ransomware_live | — |
| Bergeron LLC | October 15, 2023 | ransomware_live | — |
| REV Engineering | October 15, 2023 | ransomware_live | — |
| Action COACH | October 10, 2023 | ransomware_live | — |
| Healix | October 7, 2023 | ransomware_live | — |
| Terwilliger Land Survey Engineers | October 5, 2023 | ransomware_live | — |
| Gruskin Group | October 4, 2023 | ransomware_live | — |
| Vertical Development | September 29, 2023 | ransomware_live | — |
| The Polish AmericanAssociation | September 27, 2023 | ransomware_live | — |
| Civic San Diego | September 27, 2023 | ransomware_live | — |
| CLX Logistics | September 22, 2023 | ransomware_live | — |
| Fuji Seal International (US branch) | September 18, 2023 | ransomware_live | — |
| Glovis America | September 18, 2023 | ransomware_live | — |
| American Steel & Aluminum | September 14, 2023 | ransomware_live | — |
| Accuride | September 12, 2023 | ransomware_live | — |
| Jack Resnick & Sons | September 12, 2023 | ransomware_live | — |
| Energy One | September 6, 2023 | ransomware_live | — |
| Rivers Casino | August 31, 2023 | ransomware_live | — |
| Children's Home of Wyoming Conference | August 31, 2023 | ransomware_live | — |
| New York & Company | August 31, 2023 | ransomware_live | — |
| Renton School District | August 30, 2023 | ransomware_live | — |
| O'Brien Steel Service | August 30, 2023 | ransomware_live | — |
| Cutler-Smith | August 28, 2023 | ransomware_live | — |
| Voss Enterprises, Divvies | August 28, 2023 | ransomware_live | — |
| Penny Publications | August 28, 2023 | ransomware_live | — |
| Intertek | August 28, 2023 | ransomware_live | — |
| Jasper High School | August 28, 2023 | ransomware_live | — |
| Edmonds School District | August 24, 2023 | ransomware_live | — |
| The Clifton Public Schools | August 17, 2023 | ransomware_live | — |
| Camino Nuevo CharterAcademy | August 17, 2023 | ransomware_live | — |
| RIMSS | August 17, 2023 | ransomware_live | — |
| Tally Energy Services | August 16, 2023 | ransomware_live | — |
| Cequint | August 16, 2023 | ransomware_live | — |
| Pemberton Fabricators, Inc (Sexual Harassment videos inside) | August 15, 2023 | ransomware_live | — |
| Rite Technology | August 11, 2023 | ransomware_live | — |
| Boson | August 10, 2023 | ransomware_live | — |
| Optimum Technology | August 10, 2023 | ransomware_live | — |
| The Belt Railway Company of Chicago | August 10, 2023 | ransomware_live | — |
| TIMECO | August 9, 2023 | ransomware_live | — |
| Papel Prensa SA | August 7, 2023 | ransomware_live | — |
| Räddningstjänsten Västra Blekinge | August 7, 2023 | ransomware_live | — |
| Koury Engineering | August 4, 2023 | ransomware_live | — |
| Datawatch Systems | August 3, 2023 | ransomware_live | — |
| Venture General Agency | August 3, 2023 | ransomware_live | — |
| Guido | August 2, 2023 | ransomware_live | — |
| TGRWA | August 2, 2023 | ransomware_live | — |
| Parathon by JDA eHealth Systems | August 1, 2023 | ransomware_live | — |
| Ultimus | July 30, 2023 | ransomware_live | — |
| Optical Cable Corporation | July 30, 2023 | ransomware_live | — |
| Burmeister &Wain Scandinavian Contractor | July 30, 2023 | ransomware_live | — |
| Frost & Sullivan | July 28, 2023 | ransomware_live | — |
| Offutt Nord | July 27, 2023 | ransomware_live | — |
| Morehead State University (MSU) | July 27, 2023 | ransomware_live | — |
| Handi Quilter | July 27, 2023 | ransomware_live | — |
| Becht Engineering | July 25, 2023 | ransomware_live | — |
| Charles & Colvard Ltd. | July 24, 2023 | ransomware_live | — |
| SBM | July 24, 2023 | ransomware_live | — |
| El Milagro | July 24, 2023 | ransomware_live | — |
| Yamaha Canada Music Ltd | July 21, 2023 | ransomware_live | — |
| Bright Future Electric, LLC | July 20, 2023 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).