akira
First seen April 26, 2023Active1,671 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Bridgehead I.T | August 22, 2025 | ransomware_live | — |
| Burt Process Equipment | August 21, 2025 | ransomware_live | — |
| Blazer Building | August 21, 2025 | ransomware_live | — |
| KCI Telecommunications | August 21, 2025 | ransomware_live | — |
| LINEMASTER Switch | August 21, 2025 | ransomware_live | — |
| NC Dynamics LLC | August 20, 2025 | ransomware_live | — |
| Advanced Blending Solutions | August 20, 2025 | ransomware_live | — |
| LandWorks | August 20, 2025 | ransomware_live | — |
| Steel Encounters | August 20, 2025 | ransomware_live | — |
| RA Services | August 20, 2025 | ransomware_live | — |
| Intellect Systems | August 20, 2025 | ransomware_live | — |
| Xebec Building | August 20, 2025 | ransomware_live | — |
| Electro-Tech | August 19, 2025 | ransomware_live | — |
| Sueba USA | August 19, 2025 | ransomware_live | — |
| Keller Laser AG | August 18, 2025 | ransomware_live | — |
| ZMM | August 15, 2025 | ransomware_live | — |
| Hytrol | August 15, 2025 | ransomware_live | — |
| Aluf Plastics | August 15, 2025 | ransomware_live | — |
| Jones Soda (Stock Symbol: JSDA) | August 15, 2025 | ransomware_live | — |
| Lundberg Design | August 14, 2025 | ransomware_live | — |
| Erdy McHenry Architecture | August 14, 2025 | ransomware_live | — |
| Ranshu, Meridian Auto Parts, Visionaire,Omega enviromenta technologies, Ap Air | August 14, 2025 | ransomware_live | — |
| Litchfield Cavo LLP | August 13, 2025 | ransomware_live | — |
| Vardeco | August 13, 2025 | ransomware_live | — |
| Daily Printing | August 12, 2025 | ransomware_live | — |
| Insero & Co. CPAs, LLP | August 11, 2025 | ransomware_live | — |
| Summer results | August 11, 2025 | ransomware_live | — |
| The Law Offices of Hicks & Demps | August 11, 2025 | ransomware_live | — |
| Sweetener Supply | August 11, 2025 | ransomware_live | — |
| TRS Industries | August 11, 2025 | ransomware_live | — |
| TOP Ships | August 11, 2025 | ransomware_live | — |
| SPEEDLOGISTIK | August 11, 2025 | ransomware_live | — |
| Sterling Card Solutions | August 11, 2025 | ransomware_live | — |
| Safti First | August 11, 2025 | ransomware_live | — |
| Aurora Air Products | August 11, 2025 | ransomware_live | — |
| Geotec | August 11, 2025 | ransomware_live | — |
| Microcosm | August 11, 2025 | ransomware_live | — |
| GWU-Umwelttechnik GmbH | August 11, 2025 | ransomware_live | — |
| Wytech Industries | August 8, 2025 | ransomware_live | — |
| Woodside | August 8, 2025 | ransomware_live | — |
| Bobcat Central | August 7, 2025 | ransomware_live | — |
| Brownstone Agency | August 7, 2025 | ransomware_live | — |
| MGM Transformer | August 6, 2025 | ransomware_live | — |
| Meissner Fenstertechnik | August 1, 2025 | ransomware_live | — |
| Baycoat | August 1, 2025 | ransomware_live | — |
| Guyana Sugar | July 31, 2025 | ransomware_live | — |
| Cevital | July 31, 2025 | ransomware_live | — |
| RAVEN Mechanical | July 31, 2025 | ransomware_live | — |
| Mount Vernon Property Management | July 29, 2025 | ransomware_live | — |
| Carmichael Engineering | July 29, 2025 | ransomware_live | — |
| Exotherm | July 29, 2025 | ransomware_live | — |
| General Converting | July 29, 2025 | ransomware_live | — |
| Blanco Creek Farms | July 28, 2025 | ransomware_live | — |
| Spring Footwear | July 28, 2025 | ransomware_live | — |
| FranceLink | July 28, 2025 | ransomware_live | — |
| Helical Auto Technology (India) | July 25, 2025 | ransomware_live | — |
| Dunlap Codding | July 25, 2025 | ransomware_live | — |
| Architectural DesignWest | July 25, 2025 | ransomware_live | — |
| Hogan Construction Group | July 25, 2025 | ransomware_live | — |
| Testa Heck Testa & White | July 24, 2025 | ransomware_live | — |
| The Fredericks | July 24, 2025 | ransomware_live | — |
| RBJ Escrow Software | July 24, 2025 | ransomware_live | — |
| OKA | July 23, 2025 | ransomware_live | — |
| Druni | July 23, 2025 | ransomware_live | — |
| Anderson Packaging | July 23, 2025 | ransomware_live | — |
| Sogedis | July 22, 2025 | ransomware_live | — |
| Bondtech | July 22, 2025 | ransomware_live | — |
| Sheladia Associates | July 22, 2025 | ransomware_live | — |
| Rusin Law | July 21, 2025 | ransomware_live | — |
| Hill Peterson CarperBee & Deitzler | July 21, 2025 | ransomware_live | — |
| ESD | July 20, 2025 | ransomware_live | — |
| Souleret Engineering(LSSE) | July 18, 2025 | ransomware_live | — |
| LeasePLUS | July 18, 2025 | ransomware_live | — |
| Rare Editions | July 18, 2025 | ransomware_live | — |
| GreenVest | July 17, 2025 | ransomware_live | — |
| Sib-Tryck Holding | July 17, 2025 | ransomware_live | — |
| Title XI | July 16, 2025 | ransomware_live | — |
| Acetificio Andrea Milano | July 16, 2025 | ransomware_live | — |
| Goldberg & Osborne | July 16, 2025 | ransomware_live | — |
| The Law Company | July 16, 2025 | ransomware_live | — |
| Studioc | July 15, 2025 | ransomware_live | — |
| McKenzie Commercia | July 14, 2025 | ransomware_live | — |
| Atlas Transfer & Storage | July 14, 2025 | ransomware_live | — |
| Wegley Higginbotham & Associates | July 11, 2025 | ransomware_live | — |
| Genesis Billing Services | July 11, 2025 | ransomware_live | — |
| Wispone | July 10, 2025 | ransomware_live | — |
| Tara Pac | July 10, 2025 | ransomware_live | — |
| Ace Wire Spring & Form | July 9, 2025 | ransomware_live | — |
| PennantPark | July 7, 2025 | ransomware_live | — |
| BAF Management Consulting | July 4, 2025 | ransomware_live | — |
| HRConnects, LLC | June 30, 2025 | ransomware_live | — |
| Murex Petroleum | June 30, 2025 | ransomware_live | — |
| Watermark Marine Systems | June 30, 2025 | ransomware_live | — |
| Pinnacle Woodwork | June 30, 2025 | ransomware_live | — |
| Studio Associato Callatroni Bianchi | June 29, 2025 | ransomware_live | — |
| Priester Aviation | June 27, 2025 | ransomware_live | — |
| MultiStone | June 26, 2025 | ransomware_live | — |
| Martin Showers Smith& McDonald | June 26, 2025 | ransomware_live | — |
| Pennant Park | June 25, 2025 | ransomware_live | — |
| Cutcliffe Archetto & Santilli | June 25, 2025 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).