akira
First seen April 26, 2023Active1,671 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Alliance Roofing | October 4, 2025 | ransomware_live | — |
| Sobotec | October 3, 2025 | ransomware_live | — |
| DSA | October 3, 2025 | ransomware_live | — |
| Pine Pharmaceuticals | October 3, 2025 | ransomware_live | — |
| Dual Temp | October 2, 2025 | ransomware_live | — |
| Barr and Barr | October 1, 2025 | ransomware_live | — |
| Displayit | October 1, 2025 | ransomware_live | — |
| Apex CoVantage | September 30, 2025 | ransomware_live | — |
| Cascade Pacific Pulp | September 30, 2025 | ransomware_live | — |
| Nvno | September 30, 2025 | ransomware_live | — |
| Palacios Marine & Industrial | September 30, 2025 | ransomware_live | — |
| Gershow Recycling | September 30, 2025 | ransomware_live | — |
| Von Paris Moving | September 29, 2025 | ransomware_live | — |
| Bugnard | September 29, 2025 | ransomware_live | — |
| Turf Care Store | September 29, 2025 | ransomware_live | — |
| SG Ceresco | September 28, 2025 | ransomware_live | — |
| Midwest Industries, Inc | September 26, 2025 | ransomware_live | — |
| Pawling | September 25, 2025 | ransomware_live | — |
| Sinco | September 25, 2025 | ransomware_live | — |
| Milliman Financial Risk Management LLC (Milliman, Inc. subsidiary) | September 25, 2025 | ransomware_live | — |
| Plast-O-Matic Valves | September 25, 2025 | ransomware_live | — |
| Parrish Tire | September 25, 2025 | ransomware_live | — |
| WEDGE | September 25, 2025 | ransomware_live | — |
| The Fence People | September 24, 2025 | ransomware_live | — |
| Triple Eight Transport | September 24, 2025 | ransomware_live | — |
| Alexander Bürkle | September 23, 2025 | ransomware_live | — |
| Burke Contracting | September 23, 2025 | ransomware_live | — |
| Milburn | September 23, 2025 | ransomware_live | — |
| Harbor Diesel & Equipment | September 23, 2025 | ransomware_live | — |
| Selig Enterprises; AAA Parking | September 23, 2025 | ransomware_live | — |
| Charm Diamond Centres | September 23, 2025 | ransomware_live | — |
| Markowitz Ringel Trusty & Hartog | September 22, 2025 | ransomware_live | — |
| Saskarc | September 22, 2025 | ransomware_live | — |
| Sid Harvey's | September 22, 2025 | ransomware_live | — |
| Research & Planning Consultants | September 21, 2025 | ransomware_live | — |
| Benda Grace Stulz | September 20, 2025 | ransomware_live | — |
| Charles River Insurance | September 20, 2025 | ransomware_live | — |
| Blood Bank Computer Systems | September 19, 2025 | ransomware_live | — |
| Mailing.com | September 19, 2025 | ransomware_live | — |
| Modern Display | September 19, 2025 | ransomware_live | — |
| Wargo French | September 18, 2025 | ransomware_live | — |
| Innomotive SolutionsGroup | September 18, 2025 | ransomware_live | — |
| MMI Direct | September 17, 2025 | ransomware_live | — |
| Legal & Contingency | September 17, 2025 | ransomware_live | — |
| Art Guild | September 17, 2025 | ransomware_live | — |
| Cook Brown | September 16, 2025 | ransomware_live | — |
| Gurney's Resorts | September 15, 2025 | ransomware_live | — |
| Precision Machined Products | September 15, 2025 | ransomware_live | — |
| Martin | September 15, 2025 | ransomware_live | — |
| PYATOK | September 12, 2025 | ransomware_live | — |
| Mazza Recycling Services | September 12, 2025 | ransomware_live | — |
| TimHaahs | September 12, 2025 | ransomware_live | — |
| Boilersource | September 12, 2025 | ransomware_live | — |
| TDK Technologies | September 11, 2025 | ransomware_live | — |
| Engineered Profiles | September 11, 2025 | ransomware_live | — |
| Sadler Gibb & Associates | September 11, 2025 | ransomware_live | — |
| Venezia | September 10, 2025 | ransomware_live | — |
| Commercial Casework | September 10, 2025 | ransomware_live | — |
| Molod Spitz & DeSantis | September 10, 2025 | ransomware_live | — |
| Fluxergy | September 10, 2025 | ransomware_live | — |
| STANDARD IRON & WIREWORKS (Helgesen Industries) | September 10, 2025 | ransomware_live | — |
| Keystone Solutions Group | September 10, 2025 | ransomware_live | — |
| MS Metal Solutions | September 10, 2025 | ransomware_live | — |
| First Fruits Farms | September 10, 2025 | ransomware_live | — |
| Udall Law Firm | September 10, 2025 | ransomware_live | — |
| E&S Food | September 9, 2025 | ransomware_live | — |
| Abhe & Svoboda | September 9, 2025 | ransomware_live | — |
| Cleveland Construction | September 8, 2025 | ransomware_live | — |
| Michigan Sugar | September 5, 2025 | ransomware_live | — |
| Apricorn | September 5, 2025 | ransomware_live | — |
| Carus | September 4, 2025 | ransomware_live | — |
| Spokane Produce | September 4, 2025 | ransomware_live | — |
| Indo-MIM | September 4, 2025 | ransomware_live | — |
| Ludlow Construction | September 4, 2025 | ransomware_live | — |
| Hoyer Law Group | September 4, 2025 | ransomware_live | — |
| Crucible Industries | September 4, 2025 | ransomware_live | — |
| TSI Accessory Group,Stanley Creations Inc, iStar Jewelry, Roman & Sunstone. | September 3, 2025 | ransomware_live | — |
| The Bank of Romney | September 3, 2025 | ransomware_live | — |
| VIM Technologies | September 3, 2025 | ransomware_live | — |
| Pooler Enterprises | September 2, 2025 | ransomware_live | — |
| Natare | September 2, 2025 | ransomware_live | — |
| Fusion Homes | September 2, 2025 | ransomware_live | — |
| Boyer | September 2, 2025 | ransomware_live | — |
| Casting House | September 2, 2025 | ransomware_live | — |
| Automated Business Solutions | September 1, 2025 | ransomware_live | — |
| Genmark Automation | September 1, 2025 | ransomware_live | — |
| Ronald A/S | September 1, 2025 | ransomware_live | — |
| Tom Duffy Company | September 1, 2025 | ransomware_live | — |
| Porsche Zentrum Fulda | September 1, 2025 | ransomware_live | — |
| Mold In Graphic Systems | August 30, 2025 | ransomware_live | — |
| RMO | August 29, 2025 | ransomware_live | — |
| CyberData | August 29, 2025 | ransomware_live | — |
| About Ross, Brittain& Schonberg Co., Lpa | August 29, 2025 | ransomware_live | — |
| Aero Precision | August 29, 2025 | ransomware_live | — |
| Ben's Asphalt | August 27, 2025 | ransomware_live | — |
| Echo | August 27, 2025 | ransomware_live | — |
| Hood Technology | August 26, 2025 | ransomware_live | — |
| Colabor | August 24, 2025 | ransomware_live | — |
| Mark Edward Partners | August 22, 2025 | ransomware_live | — |
| Business Integra | August 22, 2025 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).