akira
First seen April 26, 2023Active1,602 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Apricorn | September 5, 2025 | ransomware_live | — |
| Carus | September 4, 2025 | ransomware_live | — |
| Spokane Produce | September 4, 2025 | ransomware_live | — |
| Indo-MIM | September 4, 2025 | ransomware_live | — |
| Ludlow Construction | September 4, 2025 | ransomware_live | — |
| Hoyer Law Group | September 4, 2025 | ransomware_live | — |
| Crucible Industries | September 4, 2025 | ransomware_live | — |
| TSI Accessory Group,Stanley Creations Inc, iStar Jewelry, Roman & Sunstone. | September 3, 2025 | ransomware_live | — |
| The Bank of Romney | September 3, 2025 | ransomware_live | — |
| VIM Technologies | September 3, 2025 | ransomware_live | — |
| Pooler Enterprises | September 2, 2025 | ransomware_live | — |
| Natare | September 2, 2025 | ransomware_live | — |
| Fusion Homes | September 2, 2025 | ransomware_live | — |
| Boyer | September 2, 2025 | ransomware_live | — |
| Casting House | September 2, 2025 | ransomware_live | — |
| Automated Business Solutions | September 1, 2025 | ransomware_live | — |
| Genmark Automation | September 1, 2025 | ransomware_live | — |
| Ronald A/S | September 1, 2025 | ransomware_live | — |
| Tom Duffy Company | September 1, 2025 | ransomware_live | — |
| Porsche Zentrum Fulda | September 1, 2025 | ransomware_live | — |
| Mold In Graphic Systems | August 30, 2025 | ransomware_live | — |
| RMO | August 29, 2025 | ransomware_live | — |
| CyberData | August 29, 2025 | ransomware_live | — |
| About Ross, Brittain& Schonberg Co., Lpa | August 29, 2025 | ransomware_live | — |
| Aero Precision | August 29, 2025 | ransomware_live | — |
| Ben's Asphalt | August 27, 2025 | ransomware_live | — |
| Echo | August 27, 2025 | ransomware_live | — |
| Hood Technology | August 26, 2025 | ransomware_live | — |
| Colabor | August 24, 2025 | ransomware_live | — |
| Mark Edward Partners | August 22, 2025 | ransomware_live | — |
| Business Integra | August 22, 2025 | ransomware_live | — |
| Bridgehead I.T | August 22, 2025 | ransomware_live | — |
| Burt Process Equipment | August 21, 2025 | ransomware_live | — |
| Blazer Building | August 21, 2025 | ransomware_live | — |
| KCI Telecommunications | August 21, 2025 | ransomware_live | — |
| LINEMASTER Switch | August 21, 2025 | ransomware_live | — |
| NC Dynamics LLC | August 20, 2025 | ransomware_live | — |
| Advanced Blending Solutions | August 20, 2025 | ransomware_live | — |
| LandWorks | August 20, 2025 | ransomware_live | — |
| Steel Encounters | August 20, 2025 | ransomware_live | — |
| RA Services | August 20, 2025 | ransomware_live | — |
| Intellect Systems | August 20, 2025 | ransomware_live | — |
| Xebec Building | August 20, 2025 | ransomware_live | — |
| Electro-Tech | August 19, 2025 | ransomware_live | — |
| Sueba USA | August 19, 2025 | ransomware_live | — |
| Keller Laser AG | August 18, 2025 | ransomware_live | — |
| ZMM | August 15, 2025 | ransomware_live | — |
| Hytrol | August 15, 2025 | ransomware_live | — |
| Aluf Plastics | August 15, 2025 | ransomware_live | — |
| Jones Soda (Stock Symbol: JSDA) | August 15, 2025 | ransomware_live | — |
| Lundberg Design | August 14, 2025 | ransomware_live | — |
| Erdy McHenry Architecture | August 14, 2025 | ransomware_live | — |
| Ranshu, Meridian Auto Parts, Visionaire,Omega enviromenta technologies, Ap Air | August 14, 2025 | ransomware_live | — |
| Litchfield Cavo LLP | August 13, 2025 | ransomware_live | — |
| Vardeco | August 13, 2025 | ransomware_live | — |
| Daily Printing | August 12, 2025 | ransomware_live | — |
| Insero & Co. CPAs, LLP | August 11, 2025 | ransomware_live | — |
| Summer results | August 11, 2025 | ransomware_live | — |
| The Law Offices of Hicks & Demps | August 11, 2025 | ransomware_live | — |
| Sweetener Supply | August 11, 2025 | ransomware_live | — |
| TRS Industries | August 11, 2025 | ransomware_live | — |
| TOP Ships | August 11, 2025 | ransomware_live | — |
| SPEEDLOGISTIK | August 11, 2025 | ransomware_live | — |
| Sterling Card Solutions | August 11, 2025 | ransomware_live | — |
| Safti First | August 11, 2025 | ransomware_live | — |
| Aurora Air Products | August 11, 2025 | ransomware_live | — |
| Geotec | August 11, 2025 | ransomware_live | — |
| Microcosm | August 11, 2025 | ransomware_live | — |
| GWU-Umwelttechnik GmbH | August 11, 2025 | ransomware_live | — |
| Wytech Industries | August 8, 2025 | ransomware_live | — |
| Woodside | August 8, 2025 | ransomware_live | — |
| Bobcat Central | August 7, 2025 | ransomware_live | — |
| Brownstone Agency | August 7, 2025 | ransomware_live | — |
| MGM Transformer | August 6, 2025 | ransomware_live | — |
| Meissner Fenstertechnik | August 1, 2025 | ransomware_live | — |
| Baycoat | August 1, 2025 | ransomware_live | — |
| Guyana Sugar | July 31, 2025 | ransomware_live | — |
| Cevital | July 31, 2025 | ransomware_live | — |
| RAVEN Mechanical | July 31, 2025 | ransomware_live | — |
| Mount Vernon Property Management | July 29, 2025 | ransomware_live | — |
| Carmichael Engineering | July 29, 2025 | ransomware_live | — |
| Exotherm | July 29, 2025 | ransomware_live | — |
| General Converting | July 29, 2025 | ransomware_live | — |
| Blanco Creek Farms | July 28, 2025 | ransomware_live | — |
| Spring Footwear | July 28, 2025 | ransomware_live | — |
| FranceLink | July 28, 2025 | ransomware_live | — |
| Helical Auto Technology (India) | July 25, 2025 | ransomware_live | — |
| Dunlap Codding | July 25, 2025 | ransomware_live | — |
| Architectural DesignWest | July 25, 2025 | ransomware_live | — |
| Hogan Construction Group | July 25, 2025 | ransomware_live | — |
| Testa Heck Testa & White | July 24, 2025 | ransomware_live | — |
| The Fredericks | July 24, 2025 | ransomware_live | — |
| RBJ Escrow Software | July 24, 2025 | ransomware_live | — |
| OKA | July 23, 2025 | ransomware_live | — |
| Druni | July 23, 2025 | ransomware_live | — |
| Anderson Packaging | July 23, 2025 | ransomware_live | — |
| Sogedis | July 22, 2025 | ransomware_live | — |
| Bondtech | July 22, 2025 | ransomware_live | — |
| Sheladia Associates | July 22, 2025 | ransomware_live | — |
| Rusin Law | July 21, 2025 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).