akira
First seen April 26, 2023Active1,668 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Cargo Largo | February 18, 2026 | ransomware_live | — |
| A&A Global Industries | February 18, 2026 | ransomware_live | — |
| American Beauty School | February 18, 2026 | ransomware_live | — |
| HTH Companies | February 17, 2026 | ransomware_live | — |
| Hagen Rosskopf | February 16, 2026 | ransomware_live | — |
| Williams Brothers Construction | February 16, 2026 | ransomware_live | — |
| Schmiede | February 16, 2026 | ransomware_live | — |
| Northeast Pharmacy Service | February 14, 2026 | ransomware_live | — |
| Michael L Larson | February 13, 2026 | ransomware_live | — |
| Ardene Holdings | February 13, 2026 | ransomware_live | — |
| Reynolds DeMarco & Boland | February 13, 2026 | ransomware_live | — |
| Applied Products | February 13, 2026 | ransomware_live | — |
| Verdugo Tool & Engineering | February 13, 2026 | ransomware_live | — |
| Pathway Reads and Data Analysis | February 12, 2026 | ransomware_live | — |
| Mep Technologies | February 12, 2026 | ransomware_live | — |
| COIT | February 11, 2026 | ransomware_live | — |
| Ecofit | February 11, 2026 | ransomware_live | — |
| TriPartum | February 6, 2026 | ransomware_live | — |
| Farsound Aviation | February 5, 2026 | ransomware_live | — |
| efulfillment Service | February 4, 2026 | ransomware_live | — |
| Royal Wine Corp | February 4, 2026 | ransomware_live | — |
| D'Onofrio General Contractors | February 4, 2026 | ransomware_live | — |
| Richey Tax Solutions | February 4, 2026 | ransomware_live | — |
| Karl Geuther | February 4, 2026 | ransomware_live | — |
| Siwax Specialties Group | February 4, 2026 | ransomware_live | — |
| Steve Quick Jeweler | February 4, 2026 | ransomware_live | — |
| Rosenblum Schwartz &Fry | February 3, 2026 | ransomware_live | — |
| Travelmarket | February 3, 2026 | ransomware_live | — |
| Drake Precision Dental Laboratory | February 3, 2026 | ransomware_live | — |
| PTI | February 3, 2026 | ransomware_live | — |
| Forella Group | February 3, 2026 | ransomware_live | — |
| iSMA CONTROLLI | February 3, 2026 | ransomware_live | — |
| Starr Insurance | February 3, 2026 | ransomware_live | — |
| Kilograph | February 2, 2026 | ransomware_live | — |
| Zurflüh-Feller | February 2, 2026 | ransomware_live | — |
| Business Automation Specialists of Minnesota | February 2, 2026 | ransomware_live | — |
| Bryant Consultants | January 30, 2026 | ransomware_live | — |
| Northeast IndustrialManufacturing | January 30, 2026 | ransomware_live | — |
| Fulcrum Construction | January 30, 2026 | ransomware_live | — |
| Community Property Management | January 29, 2026 | ransomware_live | — |
| Hillmann Consulting | January 29, 2026 | ransomware_live | — |
| Melton Machine & Control | January 29, 2026 | ransomware_live | — |
| iGlobal Services, Medenet | January 29, 2026 | ransomware_live | — |
| Bantry Bespoke Joinery, Murnane & O'Shea | January 29, 2026 | ransomware_live | — |
| Crosslists Data | January 29, 2026 | ransomware_live | — |
| Peerson Audio | January 29, 2026 | ransomware_live | — |
| Mingat Location | January 29, 2026 | ransomware_live | — |
| Mh Soluciones | January 27, 2026 | ransomware_live | — |
| Unisoft Communications | January 26, 2026 | ransomware_live | — |
| Fabcon | January 24, 2026 | ransomware_live | — |
| Aschwanden & Partner | January 23, 2026 | ransomware_live | — |
| JA Riollano, M&W Manufacturing, Mirbeau Hospitality Services, Reuland Electric Motor Co, S... | January 23, 2026 | ransomware_live | — |
| IGI Global | January 23, 2026 | ransomware_live | — |
| Spiros Industries | January 22, 2026 | ransomware_live | — |
| Universal Builders Supply | January 22, 2026 | ransomware_live | — |
| Ocean Fish | January 22, 2026 | ransomware_live | — |
| Van Eycken | January 22, 2026 | ransomware_live | — |
| Mettler Partner | January 21, 2026 | ransomware_live | — |
| Clipper Petroleum | January 21, 2026 | ransomware_live | — |
| Icat Food SpA | January 21, 2026 | ransomware_live | — |
| Dixon Electrical Systems & Contracting | January 19, 2026 | ransomware_live | — |
| MG Oil | January 17, 2026 | ransomware_live | — |
| Industrial Rivet & Fastener Company | January 16, 2026 | ransomware_live | — |
| DigiCOURSE | January 16, 2026 | ransomware_live | — |
| MicroPrecision | January 16, 2026 | ransomware_live | — |
| Commenco | January 16, 2026 | ransomware_live | — |
| [Redacted] #1936 | January 16, 2026 | ransomware_live | — |
| Ferretti Construction | January 16, 2026 | ransomware_live | — |
| Paylogix | January 15, 2026 | ransomware_live | — |
| McAloon & Friedman | January 15, 2026 | ransomware_live | — |
| Gorlick Kravitz & Listhaus, CogneSense, Netberry Solutions, Hein Electric Supply, Jet Wast... | January 15, 2026 | ransomware_live | — |
| H2 Builders | January 14, 2026 | ransomware_live | — |
| Fechner Pump & Supply | January 14, 2026 | ransomware_live | — |
| Rebars & Mesh | January 14, 2026 | ransomware_live | — |
| TruGolf | January 14, 2026 | ransomware_live | — |
| ImageWorks Display | January 14, 2026 | ransomware_live | — |
| Itasca Consulting Group | January 13, 2026 | ransomware_live | — |
| Bulk Handling Systems Companies | January 13, 2026 | ransomware_live | — |
| Easypak | January 13, 2026 | ransomware_live | — |
| Syrstone | January 12, 2026 | ransomware_live | — |
| Epport Richman & Robbins, Kalamazoo Valley Community College, B&J Transportation, FR Law G... | January 12, 2026 | ransomware_live | — |
| The Outdoor Recreation Group | January 12, 2026 | ransomware_live | — |
| CSS Services | January 12, 2026 | ransomware_live | — |
| Depth | January 12, 2026 | ransomware_live | — |
| Brockhaus | January 12, 2026 | ransomware_live | — |
| CONCEPTNET | January 12, 2026 | ransomware_live | — |
| Savvy Hawk | January 11, 2026 | ransomware_live | — |
| McCraw Oil | January 9, 2026 | ransomware_live | — |
| Swavelle Group, Wearbest Sil-Tex Mills | January 9, 2026 | ransomware_live | — |
| These companies havebeen hacked. | January 8, 2026 | ransomware_live | — |
| Gordon Companies | January 8, 2026 | ransomware_live | — |
| Morton Buildings | January 8, 2026 | ransomware_live | — |
| Wilson Smith CochranDickerson | January 7, 2026 | ransomware_live | — |
| RJS | January 7, 2026 | ransomware_live | — |
| United Hospital Supply | January 6, 2026 | ransomware_live | — |
| McFarlane Agencies | January 6, 2026 | ransomware_live | — |
| Posillico | January 5, 2026 | ransomware_live | — |
| The Lewis Bear | January 5, 2026 | ransomware_live | — |
| Gebrüder Bagusat GmbH & Co. KG | January 5, 2026 | ransomware_live | — |
| Purcell Architects | January 5, 2026 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).