akira
First seen April 26, 2023Active1,668 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| University SprinklerSystems | August 4, 2026 | ransomware_live | — |
| Cozad Asset Management | August 4, 2026 | ransomware_live | — |
| Seabrook Island | July 31, 2026 | ransomware_live | — |
| Cascade Coffee | July 30, 2026 | ransomware_live | — |
| Keystops | July 29, 2026 | ransomware_live | — |
| Franz Krause artworksgroup | July 28, 2026 | ransomware_live | — |
| One Vision Imaging | July 28, 2026 | ransomware_live | — |
| Albers Mechanical Contractors | July 27, 2026 | ransomware_live | — |
| BYK Construction | July 24, 2026 | ransomware_live | — |
| Belasco Electric | July 24, 2026 | ransomware_live | — |
| University Sprinkler Systems | July 22, 2026 | ransomware_live | — |
| Kruse Construction | July 22, 2026 | ransomware_live | — |
| Finer & Finer | July 21, 2026 | ransomware_live | — |
| Novasport s.r.o. | July 21, 2026 | ransomware_live | — |
| Pioneer Construction | July 15, 2026 | ransomware_live | — |
| Ironmark | July 13, 2026 | ransomware_live | — |
| Vandalia Rental | July 10, 2026 | ransomware_live | — |
| Transworld Signs | July 10, 2026 | ransomware_live | — |
| JC Sales | July 10, 2026 | ransomware_live | — |
| Nesco Bus Maintenance | July 9, 2026 | ransomware_live | — |
| Northwood Country Club | July 9, 2026 | ransomware_live | — |
| Wade's Dairy | July 8, 2026 | ransomware_live | — |
| Stone Ridge Payments | July 7, 2026 | ransomware_live | — |
| Excalibur Rentals | July 7, 2026 | ransomware_live | — |
| Chisholm Persson & Ball | July 7, 2026 | ransomware_live | — |
| RISE Architecture | July 7, 2026 | ransomware_live | — |
| L&A Transport | July 3, 2026 | ransomware_live | — |
| McKeever , Varga & Senko | July 2, 2026 | ransomware_live | — |
| Refinery Hotel | July 1, 2026 | ransomware_live | — |
| Emerge2 Digital | July 1, 2026 | ransomware_live | — |
| Advanced Business Systems | June 30, 2026 | ransomware_live | — |
| About Todd Hamaker & Johnson | June 30, 2026 | ransomware_live | — |
| Westcoast Communication Services | June 30, 2026 | ransomware_live | — |
| Precise Forms | June 26, 2026 | ransomware_live | — |
| Miami Machine | June 24, 2026 | ransomware_live | — |
| Jit Ex | June 24, 2026 | ransomware_live | — |
| Lazyboyz | June 23, 2026 | ransomware_live | — |
| Ntd Apparel | June 22, 2026 | ransomware_live | — |
| Apptricity | June 18, 2026 | ransomware_live | — |
| Berg Lilly | June 18, 2026 | ransomware_live | — |
| Smith Filter | June 17, 2026 | ransomware_live | — |
| Insite Architects | June 16, 2026 | ransomware_live | — |
| DDC Domus Design Collection | June 12, 2026 | ransomware_live | — |
| Associated Investor Services | June 10, 2026 | ransomware_live | — |
| The Midland Theatre | June 10, 2026 | ransomware_live | — |
| Port Air Express | June 10, 2026 | ransomware_live | — |
| Centre Ellipse | June 9, 2026 | ransomware_live | — |
| SMPC Architects | June 9, 2026 | ransomware_live | — |
| Rockaway River Country Club | June 9, 2026 | ransomware_live | — |
| Spray Equipment & Service Center | June 9, 2026 | ransomware_live | — |
| HRC Sicherheitsdienste | June 8, 2026 | ransomware_live | — |
| T/CCI Manufacturing | June 5, 2026 | ransomware_live | — |
| Kennon Worldwide | June 5, 2026 | ransomware_live | — |
| Northern Ohio Regional Multiple Listing Service | June 4, 2026 | ransomware_live | — |
| National Standard Parts Associates | June 4, 2026 | ransomware_live | — |
| Padget Technologies | June 4, 2026 | ransomware_live | — |
| Hal Otey Financial | June 3, 2026 | ransomware_live | — |
| Factors Western | June 3, 2026 | ransomware_live | — |
| Cherokee Distributing Co | June 3, 2026 | ransomware_live | — |
| Sunrise, Toscana Country Club, AndalusiaCountry Club. | June 3, 2026 | ransomware_live | — |
| JMS Southeast | June 2, 2026 | ransomware_live | — |
| Interstate Roofing | May 29, 2026 | ransomware_live | — |
| IH Engineers | May 29, 2026 | ransomware_live | — |
| Gone Fishin' Marine | May 27, 2026 | ransomware_live | — |
| Northwest Woodworks | May 27, 2026 | ransomware_live | — |
| Sunrise, Toscana Country Club,Andalusia Country Club. | May 26, 2026 | ransomware_live | — |
| Function Enterprises | May 22, 2026 | ransomware_live | — |
| Maschinen-Stockert | May 20, 2026 | ransomware_live | — |
| Oaks Park | May 20, 2026 | ransomware_live | — |
| TSG Enterprises | May 19, 2026 | ransomware_live | — |
| Acton Electrical | May 19, 2026 | ransomware_live | — |
| GS Yuasa Lithium Power | May 19, 2026 | ransomware_live | — |
| Gitis | May 14, 2026 | ransomware_live | — |
| Vacu - Lug | May 12, 2026 | ransomware_live | — |
| General Doors | May 12, 2026 | ransomware_live | — |
| Circle U Foods | May 11, 2026 | ransomware_live | — |
| Greenwoods Dental Centre | May 8, 2026 | ransomware_live | — |
| Zojirushi | May 8, 2026 | ransomware_live | — |
| Grau GmbH | May 7, 2026 | ransomware_live | — |
| Karlin Foods | May 7, 2026 | ransomware_live | — |
| Manhattan Broadcasting | May 6, 2026 | ransomware_live | — |
| Allele Diagnostics | May 6, 2026 | ransomware_live | — |
| Fox Valley Tax Solutions | May 6, 2026 | ransomware_live | — |
| Pipestone | May 5, 2026 | ransomware_live | — |
| Punch & Associates Investment Management | May 5, 2026 | ransomware_live | — |
| Maximum Mold | May 5, 2026 | ransomware_live | — |
| Nijborg Staal | May 2, 2026 | ransomware_live | — |
| Plumley Engineering | May 1, 2026 | ransomware_live | — |
| ATF Aerospace | April 30, 2026 | ransomware_live | — |
| Réseau Radiologique Romand | April 30, 2026 | ransomware_live | — |
| Rockville Fuel & Feed | April 24, 2026 | ransomware_live | — |
| Vision 3 Architects | April 24, 2026 | ransomware_live | — |
| Institute of Private Enterprise Development | April 24, 2026 | ransomware_live | — |
| Institute of PrivateEnterprise Development | April 24, 2026 | ransomware_live | — |
| Alpine Aerotech | April 24, 2026 | ransomware_live | — |
| Kubiak Melton & Associates | April 22, 2026 | ransomware_live | — |
| Buffalo Niagara Convention Center | April 22, 2026 | ransomware_live | — |
| Salimetrics | April 21, 2026 | ransomware_live | — |
| ABI and Ideal Tape | April 20, 2026 | ransomware_live | — |
| Clarkson Walsh & Coulter | April 18, 2026 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).