akira
First seen April 26, 2023Active1,602 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Trionex | March 5, 2026 | ransomware_live | — |
| MerchNOW | March 5, 2026 | ransomware_live | — |
| BK Group | March 4, 2026 | ransomware_live | — |
| Nicholas & Tangeman | March 4, 2026 | ransomware_live | — |
| Pyrénées | March 4, 2026 | ransomware_live | — |
| Rainbow Technology | March 3, 2026 | ransomware_live | — |
| Motleys Asset Disposition Group | March 3, 2026 | ransomware_live | — |
| Madesmart | February 28, 2026 | ransomware_live | — |
| Com-Tec | February 27, 2026 | ransomware_live | — |
| Ace Ethanol | February 27, 2026 | ransomware_live | — |
| Gemsen | February 27, 2026 | ransomware_live | — |
| Stokes | February 27, 2026 | ransomware_live | — |
| Hauri AG Staffelbach | February 26, 2026 | ransomware_live | — |
| Reflex Angelo | February 26, 2026 | ransomware_live | — |
| bdtronic | February 25, 2026 | ransomware_live | — |
| INP Schweiz | February 25, 2026 | ransomware_live | — |
| Employer Solutions Group | February 24, 2026 | ransomware_live | — |
| Huber | February 24, 2026 | ransomware_live | — |
| CognitiveTPG | February 24, 2026 | ransomware_live | — |
| Microforum | February 24, 2026 | ransomware_live | — |
| Donjon | February 23, 2026 | ransomware_live | — |
| Wills Point Chevrolet | February 23, 2026 | ransomware_live | — |
| WAG Funktion Design | February 21, 2026 | ransomware_live | — |
| Murray's Cheese | February 21, 2026 | ransomware_live | — |
| Robinson Nursery | February 21, 2026 | ransomware_live | — |
| Financial Brokerage | February 21, 2026 | ransomware_live | — |
| Frontier Technologies | February 21, 2026 | ransomware_live | — |
| The Cherokee Group | February 20, 2026 | ransomware_live | — |
| MarketGraphics Research Group | February 20, 2026 | ransomware_live | — |
| INDESMALLA | February 20, 2026 | ransomware_live | — |
| Arctic Home Living | February 20, 2026 | ransomware_live | — |
| Hrp Hitesh Cpa | February 19, 2026 | ransomware_live | — |
| Peninsular Electric Distributors | February 19, 2026 | ransomware_live | — |
| Cedar Grove Warehouse | February 18, 2026 | ransomware_live | — |
| Cargo Largo | February 18, 2026 | ransomware_live | — |
| A&A Global Industries | February 18, 2026 | ransomware_live | — |
| American Beauty School | February 18, 2026 | ransomware_live | — |
| HTH Companies | February 17, 2026 | ransomware_live | — |
| Hagen Rosskopf | February 16, 2026 | ransomware_live | — |
| Williams Brothers Construction | February 16, 2026 | ransomware_live | — |
| Schmiede | February 16, 2026 | ransomware_live | — |
| Northeast Pharmacy Service | February 14, 2026 | ransomware_live | — |
| Michael L Larson | February 13, 2026 | ransomware_live | — |
| Ardene Holdings | February 13, 2026 | ransomware_live | — |
| Reynolds DeMarco & Boland | February 13, 2026 | ransomware_live | — |
| Applied Products | February 13, 2026 | ransomware_live | — |
| Verdugo Tool & Engineering | February 13, 2026 | ransomware_live | — |
| Pathway Reads and Data Analysis | February 12, 2026 | ransomware_live | — |
| Mep Technologies | February 12, 2026 | ransomware_live | — |
| COIT | February 11, 2026 | ransomware_live | — |
| Ecofit | February 11, 2026 | ransomware_live | — |
| TriPartum | February 6, 2026 | ransomware_live | — |
| Farsound Aviation | February 5, 2026 | ransomware_live | — |
| efulfillment Service | February 4, 2026 | ransomware_live | — |
| Royal Wine Corp | February 4, 2026 | ransomware_live | — |
| D'Onofrio General Contractors | February 4, 2026 | ransomware_live | — |
| Richey Tax Solutions | February 4, 2026 | ransomware_live | — |
| Karl Geuther | February 4, 2026 | ransomware_live | — |
| Siwax Specialties Group | February 4, 2026 | ransomware_live | — |
| Steve Quick Jeweler | February 4, 2026 | ransomware_live | — |
| Rosenblum Schwartz &Fry | February 3, 2026 | ransomware_live | — |
| Travelmarket | February 3, 2026 | ransomware_live | — |
| Drake Precision Dental Laboratory | February 3, 2026 | ransomware_live | — |
| PTI | February 3, 2026 | ransomware_live | — |
| Forella Group | February 3, 2026 | ransomware_live | — |
| iSMA CONTROLLI | February 3, 2026 | ransomware_live | — |
| Starr Insurance | February 3, 2026 | ransomware_live | — |
| Kilograph | February 2, 2026 | ransomware_live | — |
| Zurflüh-Feller | February 2, 2026 | ransomware_live | — |
| Business Automation Specialists of Minnesota | February 2, 2026 | ransomware_live | — |
| Bryant Consultants | January 30, 2026 | ransomware_live | — |
| Northeast IndustrialManufacturing | January 30, 2026 | ransomware_live | — |
| Fulcrum Construction | January 30, 2026 | ransomware_live | — |
| Community Property Management | January 29, 2026 | ransomware_live | — |
| Hillmann Consulting | January 29, 2026 | ransomware_live | — |
| Melton Machine & Control | January 29, 2026 | ransomware_live | — |
| iGlobal Services, Medenet | January 29, 2026 | ransomware_live | — |
| Bantry Bespoke Joinery, Murnane & O'Shea | January 29, 2026 | ransomware_live | — |
| Crosslists Data | January 29, 2026 | ransomware_live | — |
| Peerson Audio | January 29, 2026 | ransomware_live | — |
| Mingat Location | January 29, 2026 | ransomware_live | — |
| Mh Soluciones | January 27, 2026 | ransomware_live | — |
| Unisoft Communications | January 26, 2026 | ransomware_live | — |
| Fabcon | January 24, 2026 | ransomware_live | — |
| Aschwanden & Partner | January 23, 2026 | ransomware_live | — |
| JA Riollano, M&W Manufacturing, Mirbeau Hospitality Services, Reuland Electric Motor Co, S... | January 23, 2026 | ransomware_live | — |
| IGI Global | January 23, 2026 | ransomware_live | — |
| Spiros Industries | January 22, 2026 | ransomware_live | — |
| Universal Builders Supply | January 22, 2026 | ransomware_live | — |
| Ocean Fish | January 22, 2026 | ransomware_live | — |
| Van Eycken | January 22, 2026 | ransomware_live | — |
| Mettler Partner | January 21, 2026 | ransomware_live | — |
| Clipper Petroleum | January 21, 2026 | ransomware_live | — |
| Icat Food SpA | January 21, 2026 | ransomware_live | — |
| Dixon Electrical Systems & Contracting | January 19, 2026 | ransomware_live | — |
| MG Oil | January 17, 2026 | ransomware_live | — |
| Industrial Rivet & Fastener Company | January 16, 2026 | ransomware_live | — |
| DigiCOURSE | January 16, 2026 | ransomware_live | — |
| MicroPrecision | January 16, 2026 | ransomware_live | — |
| Commenco | January 16, 2026 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).