akira
First seen April 26, 2023Active1,602 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| [Redacted] #1936 | January 16, 2026 | ransomware_live | — |
| Ferretti Construction | January 16, 2026 | ransomware_live | — |
| Paylogix | January 15, 2026 | ransomware_live | — |
| McAloon & Friedman | January 15, 2026 | ransomware_live | — |
| Gorlick Kravitz & Listhaus, CogneSense, Netberry Solutions, Hein Electric Supply, Jet Wast... | January 15, 2026 | ransomware_live | — |
| H2 Builders | January 14, 2026 | ransomware_live | — |
| Fechner Pump & Supply | January 14, 2026 | ransomware_live | — |
| Rebars & Mesh | January 14, 2026 | ransomware_live | — |
| TruGolf | January 14, 2026 | ransomware_live | — |
| ImageWorks Display | January 14, 2026 | ransomware_live | — |
| Itasca Consulting Group | January 13, 2026 | ransomware_live | — |
| Bulk Handling Systems Companies | January 13, 2026 | ransomware_live | — |
| Easypak | January 13, 2026 | ransomware_live | — |
| Syrstone | January 12, 2026 | ransomware_live | — |
| Epport Richman & Robbins, Kalamazoo Valley Community College, B&J Transportation, FR Law G... | January 12, 2026 | ransomware_live | — |
| The Outdoor Recreation Group | January 12, 2026 | ransomware_live | — |
| CSS Services | January 12, 2026 | ransomware_live | — |
| Depth | January 12, 2026 | ransomware_live | — |
| Brockhaus | January 12, 2026 | ransomware_live | — |
| CONCEPTNET | January 12, 2026 | ransomware_live | — |
| Savvy Hawk | January 11, 2026 | ransomware_live | — |
| McCraw Oil | January 9, 2026 | ransomware_live | — |
| Swavelle Group, Wearbest Sil-Tex Mills | January 9, 2026 | ransomware_live | — |
| These companies havebeen hacked. | January 8, 2026 | ransomware_live | — |
| Gordon Companies | January 8, 2026 | ransomware_live | — |
| Morton Buildings | January 8, 2026 | ransomware_live | — |
| Wilson Smith CochranDickerson | January 7, 2026 | ransomware_live | — |
| RJS | January 7, 2026 | ransomware_live | — |
| United Hospital Supply | January 6, 2026 | ransomware_live | — |
| McFarlane Agencies | January 6, 2026 | ransomware_live | — |
| Posillico | January 5, 2026 | ransomware_live | — |
| The Lewis Bear | January 5, 2026 | ransomware_live | — |
| Gebrüder Bagusat GmbH & Co. KG | January 5, 2026 | ransomware_live | — |
| Purcell Architects | January 5, 2026 | ransomware_live | — |
| JST Power Equipment | January 5, 2026 | ransomware_live | — |
| ICAFe Companies | January 5, 2026 | ransomware_live | — |
| Hintenberger GmbH | December 26, 2025 | ransomware_live | — |
| Steel Dynamics | December 24, 2025 | ransomware_live | — |
| Rafael Construction | December 24, 2025 | ransomware_live | — |
| J Grennan & Sons | December 24, 2025 | ransomware_live | — |
| Watertech of America, WorldPoint ECC, Mastermedia, Garrett Leather, Guttenberg Industries. | December 24, 2025 | ransomware_live | — |
| Trubee Wealth Advisors | December 24, 2025 | ransomware_live | — |
| Agralite Electric Cooperative | December 24, 2025 | ransomware_live | — |
| Cox Design & Metal Fabrication | December 23, 2025 | ransomware_live | — |
| Friis & Moltke | December 22, 2025 | ransomware_live | — |
| MAT 4Site Engineers | December 19, 2025 | ransomware_live | — |
| Radial Engineering | December 19, 2025 | ransomware_live | — |
| Farwest Fabrication | December 18, 2025 | ransomware_live | — |
| Household & Commercial Products Association | December 18, 2025 | ransomware_live | — |
| Morningstar Properties | December 18, 2025 | ransomware_live | — |
| Associated Thermoforming | December 18, 2025 | ransomware_live | — |
| Phillips Scales | December 18, 2025 | ransomware_live | — |
| Labeltex Group | December 18, 2025 | ransomware_live | — |
| Latitude 33 Planning& Engineering | December 17, 2025 | ransomware_live | — |
| ACME Industrial | December 17, 2025 | ransomware_live | — |
| Adelman & Gettleman | December 17, 2025 | ransomware_live | — |
| International Standard Valve | December 15, 2025 | ransomware_live | — |
| Denk & Roche Builders | December 15, 2025 | ransomware_live | — |
| Warrior Crane Service | December 12, 2025 | ransomware_live | — |
| RJS Logistics | December 12, 2025 | ransomware_live | — |
| Ada Technologies | December 11, 2025 | ransomware_live | — |
| Bell Lifestyle Products | December 11, 2025 | ransomware_live | — |
| ABECO Zumtech Drucklufttechnik AG Müliweg | December 11, 2025 | ransomware_live | — |
| Northern Air Systems(2) | December 11, 2025 | ransomware_live | — |
| Hardesty & Hanover | December 9, 2025 | ransomware_live | — |
| Rodenburg Law Firm | December 9, 2025 | ransomware_live | — |
| GearGrid | December 9, 2025 | ransomware_live | — |
| Nickman, DHK Architects, Profondia, Talbot & Associates, Fishbowl Solutions. | December 8, 2025 | ransomware_live | — |
| Takedown Request #1834 | December 8, 2025 | ransomware_live | — |
| AGI Group | December 8, 2025 | ransomware_live | — |
| PH Molds | December 8, 2025 | ransomware_live | — |
| KSL Ingenieure | December 8, 2025 | ransomware_live | — |
| Consolidated Sterilizer Systems | December 5, 2025 | ransomware_live | — |
| Rosland Capital | December 5, 2025 | ransomware_live | — |
| The Minor Firm | December 4, 2025 | ransomware_live | — |
| ABC Home & Commercial Services | December 4, 2025 | ransomware_live | — |
| Wisconsin Knife Works, The Smith Companies, Envirotech Services, Next Generation Logistics... | December 3, 2025 | ransomware_live | — |
| Fuji Vegetable Oil | December 3, 2025 | ransomware_live | — |
| Wynn & Wynn | December 3, 2025 | ransomware_live | — |
| Eggelhof | December 3, 2025 | ransomware_live | — |
| Building Controls and Services | December 3, 2025 | ransomware_live | — |
| Custom Engineered Wheels | December 3, 2025 | ransomware_live | — |
| Pan-O-Gold Baking Company | December 3, 2025 | ransomware_live | — |
| Quality Engineered Homes | December 3, 2025 | ransomware_live | — |
| BUHLMANN GROUP | December 3, 2025 | ransomware_live | — |
| Ziglin Signs | December 2, 2025 | ransomware_live | — |
| Prismier | December 2, 2025 | ransomware_live | — |
| Toledo Transducers | December 2, 2025 | ransomware_live | — |
| Jewell Engineering | December 2, 2025 | ransomware_live | — |
| Susquehanna Glass | December 2, 2025 | ransomware_live | — |
| Goldenrod | December 1, 2025 | ransomware_live | — |
| MD Manouel InsuranceAgency | December 1, 2025 | ransomware_live | — |
| Wisconsin Knife Works, The Smith Companies, Envirotech Services, Next GenerationLogistics,... | December 1, 2025 | ransomware_live | — |
| Builtrite | December 1, 2025 | ransomware_live | — |
| Wright Architectural Millwork | November 29, 2025 | ransomware_live | — |
| Lone Rock Timber | November 28, 2025 | ransomware_live | — |
| K2d | November 28, 2025 | ransomware_live | — |
| Design Team Sign Company | November 28, 2025 | ransomware_live | — |
| Morton LTC, Reed Pope Law, American Public Television, Benchmark Connector, Radtke Contrac... | November 28, 2025 | ransomware_live | — |
| Panini Kabob Grill | November 28, 2025 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).