akira
First seen April 26, 2023Active1,671 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| BOLD Furniture | November 17, 2025 | ransomware_live | — |
| LG Energy Solution | November 17, 2025 | ransomware_live | — |
| Charles Rutenberg Realty | November 17, 2025 | ransomware_live | — |
| Barnhart | November 14, 2025 | ransomware_live | — |
| Valley Banks | November 14, 2025 | ransomware_live | — |
| Barbizon Lighting Company, Roseburrough Tool, Mqd, McKay Empire, Victor Insulators. | November 14, 2025 | ransomware_live | — |
| Nadel Architects | November 14, 2025 | ransomware_live | — |
| Ruhrpumpen | November 13, 2025 | ransomware_live | — |
| Westiform Germany | November 13, 2025 | ransomware_live | — |
| Integra Architecture | November 13, 2025 | ransomware_live | — |
| Shingle & Gibb Automation | November 12, 2025 | ransomware_live | — |
| Barry Sallinger Law | November 11, 2025 | ransomware_live | — |
| Treetop Companies | November 11, 2025 | ransomware_live | — |
| Foster & Eldridge | November 11, 2025 | ransomware_live | — |
| Advanced Power | November 11, 2025 | ransomware_live | — |
| Bergeson | November 10, 2025 | ransomware_live | — |
| Koch & Co, Inc. | November 7, 2025 | ransomware_live | — |
| Globatech | November 7, 2025 | ransomware_live | — |
| Zoetis | November 6, 2025 | ransomware_live | — |
| Carbon Graphics Group | November 6, 2025 | ransomware_live | — |
| Christina Development | November 5, 2025 | ransomware_live | — |
| E-First Aid Supplies | November 5, 2025 | ransomware_live | — |
| Akehurst Landscape Service | November 5, 2025 | ransomware_live | — |
| Kirby Agri | November 5, 2025 | ransomware_live | — |
| Elliott Tax Service | November 4, 2025 | ransomware_live | — |
| A-B Communications | November 4, 2025 | ransomware_live | — |
| Rouse Frets White Goss Gentile Rhodes | November 4, 2025 | ransomware_live | — |
| Montage Marketing Services | November 3, 2025 | ransomware_live | — |
| Seasons Federal Credit Union | November 3, 2025 | ransomware_live | — |
| Morris Communications Company LLC | November 3, 2025 | ransomware_live | — |
| Mecanex USA | November 3, 2025 | ransomware_live | — |
| Stacey L Tokunaga | November 2, 2025 | ransomware_live | — |
| ARENCON | November 1, 2025 | ransomware_live | — |
| [Redacted] Request #1959 | October 31, 2025 | ransomware_live | — |
| The Gerson | October 30, 2025 | ransomware_live | — |
| Apache OpenOffice | October 30, 2025 | ransomware_live | — |
| Econo-Pak | October 30, 2025 | ransomware_live | — |
| Sullivan Interests | October 30, 2025 | ransomware_live | — |
| Huber , Erickson & Bowman | October 30, 2025 | ransomware_live | — |
| Buffalo Games, Edaron, Ceaco | October 30, 2025 | ransomware_live | — |
| Saxun by Giménez Ganga | October 30, 2025 | ransomware_live | — |
| Architectural Systems | October 30, 2025 | ransomware_live | — |
| Hydroscand | October 30, 2025 | ransomware_live | — |
| Wright-Gardner Insurance | October 29, 2025 | ransomware_live | — |
| Ritz Clark & Ben-Asher | October 29, 2025 | ransomware_live | — |
| Bell Engineering | October 29, 2025 | ransomware_live | — |
| Clarion Safety Systems | October 29, 2025 | ransomware_live | — |
| General Micro Systems | October 29, 2025 | ransomware_live | — |
| Transimpex Warenhandelsgesellschaft | October 29, 2025 | ransomware_live | — |
| Axelson WilliamowskyBender & Fishman | October 28, 2025 | ransomware_live | — |
| Bergman Dacey Goldsmith | October 28, 2025 | ransomware_live | — |
| CESO | October 28, 2025 | ransomware_live | — |
| BK Technologies | October 28, 2025 | ransomware_live | — |
| Electro Mechanical Industries | October 28, 2025 | ransomware_live | — |
| SK group, Za Za Bazaar, TH UK & Ireland Ltd and a few more. | October 27, 2025 | ransomware_live | — |
| MetroWest Community FCU | October 25, 2025 | ransomware_live | — |
| Pacific West SystemsSupply | October 21, 2025 | ransomware_live | — |
| Waukegan Steel | October 21, 2025 | ransomware_live | — |
| Woodfines | October 21, 2025 | ransomware_live | — |
| ARH Associates | October 20, 2025 | ransomware_live | — |
| Paass Logistik | October 20, 2025 | ransomware_live | — |
| Basin Harbor | October 19, 2025 | ransomware_live | — |
| Chairmans Foods | October 19, 2025 | ransomware_live | — |
| PLP SoCal | October 18, 2025 | ransomware_live | — |
| Curtis Steel Co | October 17, 2025 | ransomware_live | — |
| Plastics Extrusion Machinery | October 17, 2025 | ransomware_live | — |
| Tenryu America | October 17, 2025 | ransomware_live | — |
| Manko Window Systems | October 17, 2025 | ransomware_live | — |
| Consolidated Restaurant Operations, Inc. | October 16, 2025 | ransomware_live | — |
| Shands Elbert | October 16, 2025 | ransomware_live | — |
| Gustavo Preston | October 15, 2025 | ransomware_live | — |
| Ostrolenk Faber | October 14, 2025 | ransomware_live | — |
| Smith Gardner | October 14, 2025 | ransomware_live | — |
| ImageMaster | October 13, 2025 | ransomware_live | — |
| RPI Roofing | October 12, 2025 | ransomware_live | — |
| Designs for Vision | October 11, 2025 | ransomware_live | — |
| Ami Bearings | October 11, 2025 | ransomware_live | — |
| Eagle Oil & Gas | October 11, 2025 | ransomware_live | — |
| Carlson Building Maintenance | October 10, 2025 | ransomware_live | — |
| Miromar | October 10, 2025 | ransomware_live | — |
| Northern Air Systems | October 9, 2025 | ransomware_live | — |
| Five Star MechanicalInc. | October 9, 2025 | ransomware_live | — |
| G & H Distributing | October 9, 2025 | ransomware_live | — |
| Davis & Ferber | October 8, 2025 | ransomware_live | — |
| Cerenade | October 8, 2025 | ransomware_live | — |
| DataStream Content Solutions | October 8, 2025 | ransomware_live | — |
| St Peter Law Offices | October 8, 2025 | ransomware_live | — |
| Nobu Restaurants | October 8, 2025 | ransomware_live | — |
| Bleyl Engineering | October 8, 2025 | ransomware_live | — |
| Lautrec | October 7, 2025 | ransomware_live | — |
| J Lorber | October 7, 2025 | ransomware_live | — |
| Perry Brothers Oil | October 7, 2025 | ransomware_live | — |
| Taylor Clay Products | October 7, 2025 | ransomware_live | — |
| Field and Goldberg | October 6, 2025 | ransomware_live | — |
| Natoli Engineering | October 6, 2025 | ransomware_live | — |
| Orion Engineering | October 6, 2025 | ransomware_live | — |
| Coilplus | October 6, 2025 | ransomware_live | — |
| Moonlight Basin | October 5, 2025 | ransomware_live | — |
| Soapy Joe's Car Wash | October 5, 2025 | ransomware_live | — |
| Rhodes Young Black &Duncan RYBD | October 5, 2025 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).