akira
First seen April 26, 2023Active1,602 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Hill Peterson CarperBee & Deitzler | July 21, 2025 | ransomware_live | — |
| ESD | July 20, 2025 | ransomware_live | — |
| Souleret Engineering(LSSE) | July 18, 2025 | ransomware_live | — |
| LeasePLUS | July 18, 2025 | ransomware_live | — |
| Rare Editions | July 18, 2025 | ransomware_live | — |
| GreenVest | July 17, 2025 | ransomware_live | — |
| Sib-Tryck Holding | July 17, 2025 | ransomware_live | — |
| Title XI | July 16, 2025 | ransomware_live | — |
| Acetificio Andrea Milano | July 16, 2025 | ransomware_live | — |
| Goldberg & Osborne | July 16, 2025 | ransomware_live | — |
| The Law Company | July 16, 2025 | ransomware_live | — |
| Studioc | July 15, 2025 | ransomware_live | — |
| McKenzie Commercia | July 14, 2025 | ransomware_live | — |
| Atlas Transfer & Storage | July 14, 2025 | ransomware_live | — |
| Wegley Higginbotham & Associates | July 11, 2025 | ransomware_live | — |
| Genesis Billing Services | July 11, 2025 | ransomware_live | — |
| Wispone | July 10, 2025 | ransomware_live | — |
| Tara Pac | July 10, 2025 | ransomware_live | — |
| Ace Wire Spring & Form | July 9, 2025 | ransomware_live | — |
| PennantPark | July 7, 2025 | ransomware_live | — |
| BAF Management Consulting | July 4, 2025 | ransomware_live | — |
| HRConnects, LLC | June 30, 2025 | ransomware_live | — |
| Murex Petroleum | June 30, 2025 | ransomware_live | — |
| Watermark Marine Systems | June 30, 2025 | ransomware_live | — |
| Pinnacle Woodwork | June 30, 2025 | ransomware_live | — |
| Studio Associato Callatroni Bianchi | June 29, 2025 | ransomware_live | — |
| Priester Aviation | June 27, 2025 | ransomware_live | — |
| MultiStone | June 26, 2025 | ransomware_live | — |
| Martin Showers Smith& McDonald | June 26, 2025 | ransomware_live | — |
| Pennant Park | June 25, 2025 | ransomware_live | — |
| Cutcliffe Archetto & Santilli | June 25, 2025 | ransomware_live | — |
| Donlar Construction | June 25, 2025 | ransomware_live | — |
| Hertz Farm Management | June 25, 2025 | ransomware_live | — |
| Datrose | June 24, 2025 | ransomware_live | — |
| Hölscher Holding | June 24, 2025 | ransomware_live | — |
| The Colgin Companies | June 23, 2025 | ransomware_live | — |
| Ab Ovo | June 16, 2025 | ransomware_live | — |
| Cutcliffe Archetto &Santilli | June 16, 2025 | ransomware_live | — |
| Tufton Capital Management | June 16, 2025 | ransomware_live | — |
| HYBRO Saatzucht GmbH& Co KG | June 16, 2025 | ransomware_live | — |
| DKN Hotels | June 14, 2025 | ransomware_live | — |
| Fayrefield Foods | June 13, 2025 | ransomware_live | — |
| Dyrham Park | June 12, 2025 | ransomware_live | — |
| Sweeney | June 12, 2025 | ransomware_live | — |
| Stratascorp Technologies | June 9, 2025 | ransomware_live | — |
| Homeyer Consulting Services, Inc | June 6, 2025 | ransomware_live | — |
| Corinthian Media | June 6, 2025 | ransomware_live | — |
| RECYCLA | June 5, 2025 | ransomware_live | — |
| HBI Canada | June 5, 2025 | ransomware_live | — |
| SPANN Roofing & Sheet Metal | June 5, 2025 | ransomware_live | — |
| Observer Media Group | June 3, 2025 | ransomware_live | — |
| Dynamic Engineering | June 3, 2025 | ransomware_live | — |
| North American Lighting | June 3, 2025 | ransomware_live | — |
| Keystone Shipping | June 2, 2025 | ransomware_live | — |
| Meleam S.p.A. | May 29, 2025 | ransomware_live | — |
| NyN | May 28, 2025 | ransomware_live | — |
| Brackett & Ellis | May 27, 2025 | ransomware_live | — |
| TOP Ships Inc., Stock Symbol TOPS | May 27, 2025 | ransomware_live | — |
| Sturdevant's Auto Parts | May 27, 2025 | ransomware_live | — |
| Sturdevant'sAuto Parts | May 27, 2025 | ransomware_live | — |
| Access Financial | May 27, 2025 | ransomware_live | — |
| Farmacisti Più Rinaldi S.p.A. | May 26, 2025 | ransomware_live | — |
| Arbour Volkswagen | May 26, 2025 | ransomware_live | — |
| Delignit | May 23, 2025 | ransomware_live | — |
| AMS Paving | May 23, 2025 | ransomware_live | — |
| Mazzoleni | May 23, 2025 | ransomware_live | — |
| Reimo | May 23, 2025 | ransomware_live | — |
| Professional TestingCorporation (PTC) | May 22, 2025 | ransomware_live | — |
| Bronx Pro Group | May 22, 2025 | ransomware_live | — |
| JDC Air & Sea Freight (HEUEL LOGISTICS Group) | May 21, 2025 | ransomware_live | — |
| BEST VISION | May 20, 2025 | ransomware_live | — |
| MSM International (TOYOMI) | May 20, 2025 | ransomware_live | — |
| Rommel's Ac\Rommel Electric\Rommel Harley - Davidson | May 20, 2025 | ransomware_live | — |
| Sleepy Hollow Country Club | May 20, 2025 | ransomware_live | — |
| Patron Insurance Services | May 20, 2025 | ransomware_live | — |
| PEPRO | May 20, 2025 | ransomware_live | — |
| Mantis Creative. Formerly known as WCI Rally. | May 19, 2025 | ransomware_live | — |
| DALB | May 19, 2025 | ransomware_live | — |
| Laboratorios Belloch(Nelly, Yunsey, Fresh feel) | May 16, 2025 | ransomware_live | — |
| LaboratoriosBelloch (Nelly, Yunsey,Fresh feel) | May 16, 2025 | ransomware_live | — |
| Del Corona & Scardigli Canada | May 15, 2025 | ransomware_live | — |
| Termignoni SpA | May 15, 2025 | ransomware_live | — |
| Imblum Law Offices | May 15, 2025 | ransomware_live | — |
| Del Corona &Scardigli Canada | May 15, 2025 | ransomware_live | — |
| Av Alumitran | May 14, 2025 | ransomware_live | — |
| VS Associates | May 14, 2025 | ransomware_live | — |
| Studio Verna SocietàProfessionale | May 14, 2025 | ransomware_live | — |
| Studio VernaSocietà Professionale | May 14, 2025 | ransomware_live | — |
| Great Lakes Carpet &Tile | May 14, 2025 | ransomware_live | — |
| Superior Steel | May 13, 2025 | ransomware_live | — |
| Franman | May 13, 2025 | ransomware_live | — |
| Integrity Mortgage | May 13, 2025 | ransomware_live | — |
| Flegenheimer International | May 13, 2025 | ransomware_live | — |
| Broadway National | May 13, 2025 | ransomware_live | — |
| Turbo International | May 13, 2025 | ransomware_live | — |
| S4K Entertainment | May 13, 2025 | ransomware_live | — |
| Leo International | May 13, 2025 | ransomware_live | — |
| Precision Tax Relief | May 12, 2025 | ransomware_live | — |
| Seppeler Gruppe | May 12, 2025 | ransomware_live | — |
| Selenis (Evertis is also involved) | May 8, 2025 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).