skira
First seen March 6, 2025Active8 claimed victims
The claims below are reproduced as posted by skira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Skira is a small ransomware group that emerged around late 2024, claiming responsibility for the breach of Carruth Compliance Consulting that exposed SSNs, W-2s, and financial records of employees across 36 US school districts, with five total claimed victims across the US, Turkey, and India.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| INNOVEX HOLDINGS CO., LTD | November 18, 2025 | ransomware_live | — |
| Dedicated Web Consultants, Inc | May 1, 2025 | ransomware_live | — |
| Independent Title Agency, LLC | April 18, 2025 | ransomware_live | — |
| Krisala Developer | March 6, 2025 | ransomware_live | — |
| CCL Products India | March 6, 2025 | ransomware_live | — |
| Carruth Compliance Consulting | March 6, 2025 | ransomware_live | — |
| Law Diary | March 6, 2025 | ransomware_live | — |
| City government office in Van | March 6, 2025 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).