akira
First seen April 26, 2023Active1,602 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Shands Elbert | October 16, 2025 | ransomware_live | — |
| Gustavo Preston | October 15, 2025 | ransomware_live | — |
| Ostrolenk Faber | October 14, 2025 | ransomware_live | — |
| Smith Gardner | October 14, 2025 | ransomware_live | — |
| ImageMaster | October 13, 2025 | ransomware_live | — |
| RPI Roofing | October 12, 2025 | ransomware_live | — |
| Designs for Vision | October 11, 2025 | ransomware_live | — |
| Ami Bearings | October 11, 2025 | ransomware_live | — |
| Eagle Oil & Gas | October 11, 2025 | ransomware_live | — |
| Carlson Building Maintenance | October 10, 2025 | ransomware_live | — |
| Miromar | October 10, 2025 | ransomware_live | — |
| Northern Air Systems | October 9, 2025 | ransomware_live | — |
| Five Star MechanicalInc. | October 9, 2025 | ransomware_live | — |
| G & H Distributing | October 9, 2025 | ransomware_live | — |
| Davis & Ferber | October 8, 2025 | ransomware_live | — |
| Cerenade | October 8, 2025 | ransomware_live | — |
| DataStream Content Solutions | October 8, 2025 | ransomware_live | — |
| St Peter Law Offices | October 8, 2025 | ransomware_live | — |
| Nobu Restaurants | October 8, 2025 | ransomware_live | — |
| Bleyl Engineering | October 8, 2025 | ransomware_live | — |
| Lautrec | October 7, 2025 | ransomware_live | — |
| J Lorber | October 7, 2025 | ransomware_live | — |
| Perry Brothers Oil | October 7, 2025 | ransomware_live | — |
| Taylor Clay Products | October 7, 2025 | ransomware_live | — |
| Field and Goldberg | October 6, 2025 | ransomware_live | — |
| Natoli Engineering | October 6, 2025 | ransomware_live | — |
| Orion Engineering | October 6, 2025 | ransomware_live | — |
| Coilplus | October 6, 2025 | ransomware_live | — |
| Moonlight Basin | October 5, 2025 | ransomware_live | — |
| Soapy Joe's Car Wash | October 5, 2025 | ransomware_live | — |
| Rhodes Young Black &Duncan RYBD | October 5, 2025 | ransomware_live | — |
| Alliance Roofing | October 4, 2025 | ransomware_live | — |
| Sobotec | October 3, 2025 | ransomware_live | — |
| DSA | October 3, 2025 | ransomware_live | — |
| Pine Pharmaceuticals | October 3, 2025 | ransomware_live | — |
| Dual Temp | October 2, 2025 | ransomware_live | — |
| Barr and Barr | October 1, 2025 | ransomware_live | — |
| Displayit | October 1, 2025 | ransomware_live | — |
| Apex CoVantage | September 30, 2025 | ransomware_live | — |
| Cascade Pacific Pulp | September 30, 2025 | ransomware_live | — |
| Nvno | September 30, 2025 | ransomware_live | — |
| Palacios Marine & Industrial | September 30, 2025 | ransomware_live | — |
| Gershow Recycling | September 30, 2025 | ransomware_live | — |
| Von Paris Moving | September 29, 2025 | ransomware_live | — |
| Bugnard | September 29, 2025 | ransomware_live | — |
| Turf Care Store | September 29, 2025 | ransomware_live | — |
| SG Ceresco | September 28, 2025 | ransomware_live | — |
| Midwest Industries, Inc | September 26, 2025 | ransomware_live | — |
| Pawling | September 25, 2025 | ransomware_live | — |
| Sinco | September 25, 2025 | ransomware_live | — |
| Milliman Financial Risk Management LLC (Milliman, Inc. subsidiary) | September 25, 2025 | ransomware_live | — |
| Plast-O-Matic Valves | September 25, 2025 | ransomware_live | — |
| Parrish Tire | September 25, 2025 | ransomware_live | — |
| WEDGE | September 25, 2025 | ransomware_live | — |
| The Fence People | September 24, 2025 | ransomware_live | — |
| Triple Eight Transport | September 24, 2025 | ransomware_live | — |
| Alexander Bürkle | September 23, 2025 | ransomware_live | — |
| Burke Contracting | September 23, 2025 | ransomware_live | — |
| Milburn | September 23, 2025 | ransomware_live | — |
| Harbor Diesel & Equipment | September 23, 2025 | ransomware_live | — |
| Selig Enterprises; AAA Parking | September 23, 2025 | ransomware_live | — |
| Charm Diamond Centres | September 23, 2025 | ransomware_live | — |
| Markowitz Ringel Trusty & Hartog | September 22, 2025 | ransomware_live | — |
| Saskarc | September 22, 2025 | ransomware_live | — |
| Sid Harvey's | September 22, 2025 | ransomware_live | — |
| Research & Planning Consultants | September 21, 2025 | ransomware_live | — |
| Benda Grace Stulz | September 20, 2025 | ransomware_live | — |
| Charles River Insurance | September 20, 2025 | ransomware_live | — |
| Blood Bank Computer Systems | September 19, 2025 | ransomware_live | — |
| Mailing.com | September 19, 2025 | ransomware_live | — |
| Modern Display | September 19, 2025 | ransomware_live | — |
| Wargo French | September 18, 2025 | ransomware_live | — |
| Innomotive SolutionsGroup | September 18, 2025 | ransomware_live | — |
| MMI Direct | September 17, 2025 | ransomware_live | — |
| Legal & Contingency | September 17, 2025 | ransomware_live | — |
| Art Guild | September 17, 2025 | ransomware_live | — |
| Cook Brown | September 16, 2025 | ransomware_live | — |
| Gurney's Resorts | September 15, 2025 | ransomware_live | — |
| Precision Machined Products | September 15, 2025 | ransomware_live | — |
| Martin | September 15, 2025 | ransomware_live | — |
| PYATOK | September 12, 2025 | ransomware_live | — |
| Mazza Recycling Services | September 12, 2025 | ransomware_live | — |
| TimHaahs | September 12, 2025 | ransomware_live | — |
| Boilersource | September 12, 2025 | ransomware_live | — |
| TDK Technologies | September 11, 2025 | ransomware_live | — |
| Engineered Profiles | September 11, 2025 | ransomware_live | — |
| Sadler Gibb & Associates | September 11, 2025 | ransomware_live | — |
| Venezia | September 10, 2025 | ransomware_live | — |
| Commercial Casework | September 10, 2025 | ransomware_live | — |
| Molod Spitz & DeSantis | September 10, 2025 | ransomware_live | — |
| Fluxergy | September 10, 2025 | ransomware_live | — |
| STANDARD IRON & WIREWORKS (Helgesen Industries) | September 10, 2025 | ransomware_live | — |
| Keystone Solutions Group | September 10, 2025 | ransomware_live | — |
| MS Metal Solutions | September 10, 2025 | ransomware_live | — |
| First Fruits Farms | September 10, 2025 | ransomware_live | — |
| Udall Law Firm | September 10, 2025 | ransomware_live | — |
| E&S Food | September 9, 2025 | ransomware_live | — |
| Abhe & Svoboda | September 9, 2025 | ransomware_live | — |
| Cleveland Construction | September 8, 2025 | ransomware_live | — |
| Michigan Sugar | September 5, 2025 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).