akira
First seen April 26, 2023Active1,671 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Donlar Construction | June 25, 2025 | ransomware_live | — |
| Hertz Farm Management | June 25, 2025 | ransomware_live | — |
| Datrose | June 24, 2025 | ransomware_live | — |
| Hölscher Holding | June 24, 2025 | ransomware_live | — |
| The Colgin Companies | June 23, 2025 | ransomware_live | — |
| Ab Ovo | June 16, 2025 | ransomware_live | — |
| Cutcliffe Archetto &Santilli | June 16, 2025 | ransomware_live | — |
| Tufton Capital Management | June 16, 2025 | ransomware_live | — |
| HYBRO Saatzucht GmbH& Co KG | June 16, 2025 | ransomware_live | — |
| DKN Hotels | June 14, 2025 | ransomware_live | — |
| Fayrefield Foods | June 13, 2025 | ransomware_live | — |
| Dyrham Park | June 12, 2025 | ransomware_live | — |
| Sweeney | June 12, 2025 | ransomware_live | — |
| Stratascorp Technologies | June 9, 2025 | ransomware_live | — |
| Homeyer Consulting Services, Inc | June 6, 2025 | ransomware_live | — |
| Corinthian Media | June 6, 2025 | ransomware_live | — |
| RECYCLA | June 5, 2025 | ransomware_live | — |
| HBI Canada | June 5, 2025 | ransomware_live | — |
| SPANN Roofing & Sheet Metal | June 5, 2025 | ransomware_live | — |
| Observer Media Group | June 3, 2025 | ransomware_live | — |
| Dynamic Engineering | June 3, 2025 | ransomware_live | — |
| North American Lighting | June 3, 2025 | ransomware_live | — |
| Keystone Shipping | June 2, 2025 | ransomware_live | — |
| Meleam S.p.A. | May 29, 2025 | ransomware_live | — |
| NyN | May 28, 2025 | ransomware_live | — |
| Brackett & Ellis | May 27, 2025 | ransomware_live | — |
| TOP Ships Inc., Stock Symbol TOPS | May 27, 2025 | ransomware_live | — |
| Sturdevant's Auto Parts | May 27, 2025 | ransomware_live | — |
| Sturdevant'sAuto Parts | May 27, 2025 | ransomware_live | — |
| Access Financial | May 27, 2025 | ransomware_live | — |
| Farmacisti Più Rinaldi S.p.A. | May 26, 2025 | ransomware_live | — |
| Arbour Volkswagen | May 26, 2025 | ransomware_live | — |
| Delignit | May 23, 2025 | ransomware_live | — |
| AMS Paving | May 23, 2025 | ransomware_live | — |
| Mazzoleni | May 23, 2025 | ransomware_live | — |
| Reimo | May 23, 2025 | ransomware_live | — |
| Professional TestingCorporation (PTC) | May 22, 2025 | ransomware_live | — |
| Bronx Pro Group | May 22, 2025 | ransomware_live | — |
| JDC Air & Sea Freight (HEUEL LOGISTICS Group) | May 21, 2025 | ransomware_live | — |
| BEST VISION | May 20, 2025 | ransomware_live | — |
| MSM International (TOYOMI) | May 20, 2025 | ransomware_live | — |
| Rommel's Ac\Rommel Electric\Rommel Harley - Davidson | May 20, 2025 | ransomware_live | — |
| Sleepy Hollow Country Club | May 20, 2025 | ransomware_live | — |
| Patron Insurance Services | May 20, 2025 | ransomware_live | — |
| PEPRO | May 20, 2025 | ransomware_live | — |
| Mantis Creative. Formerly known as WCI Rally. | May 19, 2025 | ransomware_live | — |
| DALB | May 19, 2025 | ransomware_live | — |
| Laboratorios Belloch(Nelly, Yunsey, Fresh feel) | May 16, 2025 | ransomware_live | — |
| LaboratoriosBelloch (Nelly, Yunsey,Fresh feel) | May 16, 2025 | ransomware_live | — |
| Del Corona & Scardigli Canada | May 15, 2025 | ransomware_live | — |
| Termignoni SpA | May 15, 2025 | ransomware_live | — |
| Imblum Law Offices | May 15, 2025 | ransomware_live | — |
| Del Corona &Scardigli Canada | May 15, 2025 | ransomware_live | — |
| Av Alumitran | May 14, 2025 | ransomware_live | — |
| VS Associates | May 14, 2025 | ransomware_live | — |
| Studio Verna SocietàProfessionale | May 14, 2025 | ransomware_live | — |
| Studio VernaSocietà Professionale | May 14, 2025 | ransomware_live | — |
| Great Lakes Carpet &Tile | May 14, 2025 | ransomware_live | — |
| Superior Steel | May 13, 2025 | ransomware_live | — |
| Franman | May 13, 2025 | ransomware_live | — |
| Integrity Mortgage | May 13, 2025 | ransomware_live | — |
| Flegenheimer International | May 13, 2025 | ransomware_live | — |
| Broadway National | May 13, 2025 | ransomware_live | — |
| Turbo International | May 13, 2025 | ransomware_live | — |
| S4K Entertainment | May 13, 2025 | ransomware_live | — |
| Leo International | May 13, 2025 | ransomware_live | — |
| Precision Tax Relief | May 12, 2025 | ransomware_live | — |
| Seppeler Gruppe | May 12, 2025 | ransomware_live | — |
| Selenis (Evertis is also involved) | May 8, 2025 | ransomware_live | — |
| Daniels & Taylor, P.C | May 6, 2025 | ransomware_live | — |
| Flagship Bank | May 6, 2025 | ransomware_live | — |
| High Grade Materials | May 2, 2025 | ransomware_live | — |
| Southwood Financial,SWF FUNDING LLC, EduCap Inc. | April 30, 2025 | ransomware_live | — |
| Kramer Green Zuckerman Greene and Buchsbaum | April 28, 2025 | ransomware_live | — |
| Cohn Lifland Pearlman Herrmann and Knopf | April 25, 2025 | ransomware_live | — |
| Santa Cruz Properties | April 25, 2025 | ransomware_live | — |
| J. SCHNEEBERGER Maschinen AG | April 25, 2025 | ransomware_live | — |
| DYNAMIS Insurance | April 25, 2025 | ransomware_live | — |
| Oversea Casing | April 24, 2025 | ransomware_live | — |
| Dress To | April 24, 2025 | ransomware_live | — |
| AGME Automated assembly solutions | April 24, 2025 | ransomware_live | — |
| Rayle Electric Membership Corporation | April 23, 2025 | ransomware_live | — |
| Fogelman Management Group | April 23, 2025 | ransomware_live | — |
| Sweeney Design | April 23, 2025 | ransomware_live | — |
| Selenis (Evertis) | April 22, 2025 | ransomware_live | — |
| Pacific Summit Energy, Sumitomo Corporation affiliate | April 22, 2025 | ransomware_live | — |
| Bindi SpA | April 21, 2025 | ransomware_live | — |
| The law firm of Rochelle McCullough, L.L.P | April 21, 2025 | ransomware_live | — |
| MASHBURN CONSTRUCTION | April 21, 2025 | ransomware_live | — |
| ZB ZIMMERMANN UND BECKERGmbH | April 21, 2025 | ransomware_live | — |
| Auren part 2 | April 21, 2025 | ransomware_live | — |
| Auren part 1 | April 21, 2025 | ransomware_live | — |
| The Haymond Law Firm | April 21, 2025 | ransomware_live | — |
| Hayward Quartz Technology | April 18, 2025 | ransomware_live | — |
| Toppan Next | April 18, 2025 | ransomware_live | — |
| Hubbard, McIlwain, &Brakefield, P.C. | April 18, 2025 | ransomware_live | — |
| Heinz Hammer Vertragswerkstatt (Mercedes-Benz car dealer) | April 18, 2025 | ransomware_live | — |
| Agencia Browne y Espinoza | April 18, 2025 | ransomware_live | — |
| TrussWorks International | April 18, 2025 | ransomware_live | — |
| D'Granel | April 16, 2025 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).