akira
ransomware group · aka Akira, Akira_VP (Linux/VMware ESXi variant), HDK / 'How Daemons Kill' (reported rebrand of its Linux encryptor, 2024) · Unknown; believed to be Russian-speaking. Some researchers have speculated links to former Conti-affiliated operators (unconfirmed). · active since March 2023
Victims · 7d
9▲3 vs prev. week
Victims · 30d
41active targets
Victims · 90d
83
All-time (tracked)
1.5Ksince 2023-04-29
Last post
09-16 17:42UTC
Estimated earnings
Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since.public reporting
Profile · glm-5.3-flash · updated
Akira is a ransomware and data-extortion group first observed in March 2023, known for double extortion and a dedicated leak site used to pressure non-paying victims. It primarily targets small and mid-sized organizations across multiple sectors in North America and Europe, gaining initial access through SSL VPNs and edge appliances (notably Cisco ASA/FTD and SonicWall) often without multi-factor authentication. The group operates both Windows and Linux/VMware ESXi encryptors (Akira_VP) and, per 2025 vendor reporting, has used Windows Safe Mode reboots and attempted EDR tampering to evade defenses. The FBI and CISA estimated roughly $42 million in ransom proceeds as of March 2024 (source: FBI/CISA joint advisory, 2024). The group remains active, with this dashboard tracking five new leak-site victims in the past seven days (last post 2026-09-09).
Tactics & tooling
- Initial access via SSL VPNs/edge appliances lacking MFA; exploits Cisco ASA/FTD (CVE-2023-20269) and SonicWall SonicOS (CVE-2024-40766); 2025 reporting also links affiliates to SonicWall SSL VPN zero-day exploitation.
- Double extortion: data exfiltration followed by encryption; leak-site shaming of non-payers.
- Dual-platform encryptors: Windows locker plus Linux/VMware ESXi variant (Akira_VP).
- Exfiltration using cloud storage and transfer tools, including MEGA (MEGAsync) and Rclone, per FBI/CISA reporting.
- EDR evasion: rebooting hosts into Windows Safe Mode to bypass security tooling; at least one affiliate crashed systems while attempting EDR tampering (2025).
- Reported abuse of Microsoft Intune to push ransomware during deployment (2025 vendor research).
- Credential-based access: compromised credentials, brute forcing, and purchases from initial access brokers, per FBI/CISA advisory.
- Post-access reconnaissance with network-scanning utilities (e.g., Advanced IP Scanner) before lateral movement.
Targeted sectors
ManufacturingProfessional/business servicesHealthcareEducationConstructionFinanceIT servicesBroadly targets SMBs and mid-market organizations across critical infrastructure
Notable public victims
Stanford University (claimed October 2023), Nissan Oceania (claimed December 2023), Recent dashboard-tracked leak-site victims (September 2026): Kyodo USA, Brentwood Country Club, CreateASoft, Brent Electric, Stransky Heiz-Mess-Regeltechnik GmbH
Estimated earnings
Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. — FBI/CISA joint cybersecurity advisory AA24-109A (published May 2024), citing ~$42 million in ransom proceeds as of March 2024.
Leak-site victims1,491 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| K2d | · Nov 28, 2025 | K2D Consulting Engineers is a professional Mechanical, Electrical, and Plumbing (MEP) consulting firm based in Los Angeles, recognized for its innovative and collaborative design approaches.We are ready to upload 121GB files of essential corporate documents such as: personal employee data, detailed financials, agreements, client information, confidentiality agreements, NDA, etc. |
| Mechanical Systems | · Nov 27, 2025 | Mechanical Systems Company offers building automation controls and services. We are ready to upload more than 30GB files of essential corporate documents such as: Employee personal information (SSNs, DLs, passports and so on), confidentiality agreements, financials, clients information, NDA, etc. |
| Hitech | · Nov 27, 2025 | Hitech is a prominent single-seater racing team based in Silverstone, UK, competing in various national and international motorsport championships including FIA Formula 2, FIA Formula 3, GB3, andFormula 4.We will upload 85gb of corporate documents soon. Drivers personaldocuments, race cars information, race reports, teams and staff information and other interesting files. |
| Crucible Industries | · Nov 27, 2025 | Crucible Industries was founded in 1870. This company provides the manufacturing of steel long products, and other metal building materials.We will upload 10gb of corporate documents soon. Internal operational files, a bit of customer information, scans and so on. |
| Asl Consulting, DTG Consulting Solutions, Snyder Cohn, SBLM Architects, Dealer Information | · Nov 27, 2025 | We obtained about 14gb of the following companies:ASL provides Human Resources Software, Professional Services and Managed Outsourced Solutions for large and medium-sized organizations requiring a level of complexity and sophistication in HR beyond what is available from payroll providers with an HR offering.DTG Consulting Solutions provides recruiting and staff augmentation for Information Technology and Finance professionals.SBLM Architects specializes in blending design intelligence with technical excellence across various sectors, including healthcare, education, retail, commercial, mixed-use, and civic projects.Snyder Cohn is a renowned CPA and business advisory firm established in 1927, providing expert services to businesses, executives,and nonprofits primarily in the Washington DC area. They offer acomprehensive range of accounting services including compliance,tax, audit, and specialized client accounting advisory services.Dealer Information Systems (DIS) is a leading business managementsoftware provider to ag, construction, truck refrigeration and lift truck dealers.You will find personal employees and customer information, lots of projects, agreements and contracts and other sensitive files. |
| Country Club Enterprises | · Nov 27, 2025 | Country Club Enterprises (CCE) sells and services Club Car golf cars and other low speed vehicles to Country Clubs, municipalities, and homeowners throughout New England.We are ready to upload more than 14GB files of essential corporate documents such as: employees and their relatives personal information (DLs, passports and so on), detailed financials, contractsand agreements, NDA, interesting project files and so on. |
| Kelly Wearstler Gallery | · Nov 27, 2025 | Kelly Wearstlers global luxury brand is influenced by spans of residential and commercial interior design. Kelly Wearstlers holds product collections of furniture, lighting, rugs, fabrics and trims, wall coverings, luxe bedding, fine china, and decorative homeaccessories.We are ready to upload more than 14GB files of essential corporate documents such as: HR files (employee personal information, complete forms and so on), financials, etc. |
| Zoetis | · Nov 26, 2025 | Zoetis discovers, develops, manufactures, and commercializes animal health medicines, vaccines, and diagnostic products in the United States and internationally.We will upload 25gb of corporate documents soon. Lots of internaldocuments, clients' data, numerous test and other information. |
| Fineline Architectural Millwork | · Nov 26, 2025 | Fineline Woodworks Inc. is full service custom carpentry located in Orange County in beautiful southern California.We will upload 100gb of corporate documents soon. Employee personal information, detailed financials, NDAs, projects, clientsinformation, agreements and so on. |
| Stacey L Tokunaga | · Nov 26, 2025 | The Law Offices of Stacey L. Tokunaga specializes in Workers Compensation Defense law, offering committed and high-quality legal services to self-insured employers, third party administrators, and insured clients.We will upload 200gb of corporate documents soon. Detailed personal employee information (DLs, SSNs, passports, addresses, phones and so on), detailed financials, clients' credit cards, police reports, NDAs, etc. |
| Bergeson | · Nov 26, 2025 | Bergeson, LLP is a leading litigation law firm based in Silicon Valley, established in 1990. The firm specializes in representing individuals and companies in high-profile and high-stakes litigation across the country, offering innovative strategies tailored to complex business disputes.We are ready to upload more than 33GB data. There are lots of essential corporate documents such as: financial data (audit, payment details, invoices), detailed employees and customers information (passports, driver's license , Social Security Numbers,death/birth certificate) confidential information, NDAs and other documents with detailed personal information. |
| Dobco | · Nov 26, 2025 | Dobco founded in 1989 and headquartered in Wayne, New Jersey, is an established multi-faceted general construction firm.We are going to upload company data soon. You will find financialdata (audit, payment details,financial reports, invoices), personal financial details of employees, accounting files. |
| Pacific Railway Enterprises | · Nov 26, 2025 | Pacific Railway Enterprises, Inc. is a woman-owned corporation specializing in Railroad System Design and Consulting.We will upload more than 20gb of corporate documents soon. Employee lists containing personal information, NDAs, contacts and agreements, projects, etc. |
| FloorHeat | · Nov 26, 2025 | FloorHeat Company specializes in manufacturing and distributing radiant heat components and complete underfloor heating systems, including electric film, cable heating mats, and their patented EasyFloor hydronic heating system.We will upload 25gb of corporate documents soon. Detailed employee personal information, financial and accounting data, contacts and agreements, NDAs, etc. |
| Globatech | · Nov 26, 2025 | Globatech comprises six companies, offering 24/7 service throughout Quebec with an expanded presence across Canada to ensure the health and safety of your buildings.We will upload about 25gb of corporate documents soon. Employee and clients information, financial and accounting data, projects, contacts and agreements, confidential files, NDAs, etc. |
| Williams & Sparages | · Nov 26, 2025 | Williams & Sparages is a full-service engineering firm specializing in civil engineering, planning and development, surveying and mapping, and construction services.We will upload about 127gb of corporate documents soon. Clients information, employee personal information, financials, credit card details, projects, contacts and agreements, etc. |
| Rochester Philharmonic Orchestra | · Nov 25, 2025 | The Rochester Philharmonic Orchestra (RPO) is a distinguished institution with a 100-year legacy of artistic excellence, offering a diverse range of concerts and educational programs. We will upload corporate documents soon. Musicians' personal information (SSNs, DLs, phones and so on), budget, internal confidential docs, NDA, etc. |
| Standing Chapter 13 Trustee | · Nov 25, 2025 | The Standing Chapter 13 Trustee District of Minnesota provides services related to bankruptcy cases under Chapter 13, assisting debtors with payment information and case-related resources.We will upload 44gb of corporate documents soon. Employee and client personal documents (SSNs, passports, DLs and so on), detailedfinancials, internal confidential docs, contracts and agreements, court documents, etc. |
| Chairmans Foods | · Nov 24, 2025 | Chairmans Foods is a gold-star rated, USDA manufacturing plant and producer of fresh, frozen and refrigerated food products for more than 40 years. They serve delicious home cooked foods to various delis, grocers and chain restaurants.We are going to upload company data soon. You will find financialdata (audit, payment details, financial reports, invoices), personal financial details of employees, accounting files. |
| Akehurst Landscape Service | · Nov 24, 2025 | Akehurst Landscape Service, Inc., based in Joppa, MD, offers a wide range of landscaping, snow removal, and grounds maintenance services tailored to meet the needs of commercial, industrial, and residential clients. We are going to upload company data soon. You will find financialdata (audit, payment details, financial reports, invoices), personal financial details of employees, accounting files. |
| Electro Mechanical Industries | · Nov 21, 2025 | Electro-Mechanical Industries, Inc. (EMI) is a manufacturer of standard and custom electrical distribution equipment serving the needs of the electrical industry in the national and internationalmarketplaces.We will upload 50gb of corporate documents soon. Lots of forms with personal employee data (SSNs, addresses, phones, emails), financials, client data, contracts and agreements, projects, drawingsand specifications, etc. |
| PM Plastics, Reliable Van & Storage, Landis, Whitinger Strategic Services, Kimber Manufact | · Nov 21, 2025 | We obtained about 29gb of the following companies:PM Plastics manufacturing of miniatures, small parts, large parts, and multiple component assemblies, with most polymers, acrylics, and thermoplastics.Reliable Van & Storage is a full-service moving company based in New Jersey, offering local, long-distance, and international relocation services for both residential and commercial clients.Landis is a real estate services company that that uses technology and data science to help renters reach home ownership.Whitinger Strategic Services is a business development firm that offers a variety of consulting services to help organizations grow in effectiveness, both internally and in the marketplace.Kimber provides a singular purpose of building fine sporting firearms, better even than classics from the golden age of American gunmaking.You will find personal employee personal data, client information, project files, accounting and financials and other internal operational files. |
| First Fruits Farms | · Nov 21, 2025 | First Fruits Farms, located in Prescott, Washington, is an agricultural company that specializes in apple and cherry orchards.We will upload 26gb of corporate documents soon. Employee personal documents (SSNs, passports, w-9 forms), detailed financials, customer data, contracts and agreements, projects, drawings and specifications, etc. |
| Wright ArchitecturalMillwork | · Nov 20, 2025 | Wright Architectural Millwork specializes in high-quality architectural woodwork and has been in the industry for 50 years. We will upload 87gb of corporate documents soon. Employee personal information (passport numbers, driver licenses, phones, emails), financials, a bit of client data, contracts and agreements, NDA, etc. |
| Swift Filters | · Nov 20, 2025 | Swift Filters is a leading US manufacturer of high-quality hydraulic filter elements, offering a wide range of replacement filtersfor various brands including Parker Hannifin, Pall, and Donaldson.We will upload 140gb of corporate documents soon. Employee personal files, financials, client data, contracts, NDA, projects, drawings and specification, etc. |
| FELA (EVYTRA) | · Nov 20, 2025 | EVYTRA specializes in developing and manufacturing innovative electronic solutions, including Human Machine Interfaces (HMIs) and printed circuit boards (PCBs).We will upload 91gb of corporate documents soon. Employee personal data (identity cards, passports, driver licenses, phones, emails and other information for at least 55 ppl), financials and accounting, client files, contracts and agreements, NDA, etc. |
| Hydroscand | · Nov 20, 2025 | Hydroscand was established 1969 in Stockholm, Sweden, by Björn Holmström. The focus was, and still is, fluid connectors, hoses andfittings. High quality and reliable performance in a demanding environment was the primary focus.We are ready to upload more than 42GB data. There are lots of essential corporate documents such as: financial data (audit, payment details, invoices), detailed employees and customers information (passports, Personal identity numbers, emails, phones) confidential information, NDAs and other documents with detailed personalinformation. |
| AJ Jersey | · Nov 20, 2025 | AJ Jersey Inc. is an industry leader in Forklift Sales, Forklift Rentals, Forklift Service and all of your Material Handling needs.We will upload almost 22gb of corporate documents soon. Employee personal data (driver licenses of 73 employees, detailed health reports with DOB, phones, emails and so on), financials and accounting, client files, contracts, specifications, projects, NDA, etc. |
| Pearl River Valley Electric Power Association | · Nov 19, 2025 | PRVEPA is an electric cooperative dedicated to providing safe, dependable, and affordable power to the residents of South-Central Mississippi since 1938.We will upload 62gb of corporate documents soon. Employee data (driver licenses, phones, addresses, emails), confidential technologies, financials and accounting, contracts and agreements, clients' information, NDA, etc. |
| Orchid Island Golf and Beach Club | · Nov 19, 2025 | Orchid Island Golf and Beach Club is a member-owned golf community located in Vero Beach, Florida, nestled between the Atlantic Ocean and the Indian River.We will upload almost 20gb of corporate documents soon. Employee data (driver licenses, phones, addresses), confidential files, financials and accounting, contracts and agreements, clients' information, NDA, projects, etc. |
| Modern Display | · Nov 19, 2025 | Modern Display specializes in providing exquisite seasonal decor,collectibles, and thoughtful gifts suitable for every occasion.We will upload almost 20gb of corporate documents soon. Employee data, confidentiality agreements, detailed financials and accounting, contracts with Disney and other widely known companies, client data, lots of projects, drawings and specification, etc. |
| American Trust Administrators | · Nov 19, 2025 | American Trust Administrators, Inc. (ATA) is a national leader inthe administration and management of employee benefit plans.We will upload almost 143gb of corporate documents soon. As you can understand there are a lot of HR files, confidentiality agreements, detailed financials and accounting, lots of client files, projects, NDA, etc. |
| The InterTech Group | · Nov 19, 2025 | The InterTech Group is a holding company based in North Charleston, South Carolina, focused on investments, diversification, and opportunity creation.We will upload 17gb of corporate documents soon. Detailed personal employee data (SSNs, passports, driver licenses, Mexican ID's, personal phones, addresses, addresses emails), employee relativesdata will be available as well, confidentiality agreements, financials and accounting, contracts and agreements, clients' information, NDA, etc. |
| Perry Brothers Oil | · Nov 19, 2025 | Perry Brothers Oil Company is an automotive shop specializing in tires, motor oil, and wheel alignments. We will upload 20gb of corporate documents soon. Personal employee and customers data (passports, driver licenses, personal phones, addresses, addresses emails, credit card records), confidentiality agreements, detailed financials and accounting, contracts andagreements, clients' information, incident reports, NDA, etc. |
| Aarco | · Nov 19, 2025 | AARCO is a Mexican insurance company that offers a diverse range of products including auto, life, medical, home, and travel insurance, tailored for both individuals and businesses.We will upload 17gb of corporate documents soon. Detailed personal employee data (passports, driver licenses, Mexican ID's, personal phones, addresses, addresses emails, fingerprints), lots of confidential files, financials and accounting, contracts and agreements, clients' personal information, etc. |
| Stoss Landscape Urbanism | · Nov 19, 2025 | Stoss Landscape Urbanism specializes in designing landscapes and social spaces that promote resilience, vitality, and equity. Their projects encompass a variety of sectors including downtown plazas, parks, waterfronts, campus institutions, and mixed-use residential areas.We are ready to upload more than 76GB data. You will find employees and customers information (passports, Social Security Numbers,emails, phones) confidential information, NDAs and other documents with detailed personal information. |
| ARENCON | · Nov 19, 2025 | ARENCON is a Toronto-based consulting engineering firm specializing in fire protection, security, and life safety solutions, boasting a 25-year track record of success in North America. We are ready to upload more than 84GB data. There are lots of essential corporate documents such as: financial data (audit, payment details, invoices), detailed employees and customers information (passports, driver's license , Social Security Numbers,emails, phones) confidential information, NDAs and other documents with detailed personal information. |
| Cardinal Services | · Nov 19, 2025 | Cardinal Services, based in New Iberia, LA, is a leading oilfieldservice company specializing in land and offshore services.We will upload 90gb of corporate documents soon. Personal employee files (driver licenses, phones, addresses, emails, credit card details), financials and accounting, contracts and agreements, clients' information, incident reports, NDA, etc. |
| Bleyl Engineering | · Nov 18, 2025 | Bleyl Engineering is a Consulting Civil Engineering firm based inConroe, Texas and with offices in Bryan - College Station, Austin, and Houston.We will upload 25gb of corporate documents soon. Lots of employeepersonal files (passports, driver licenses, SSNs, phones, addresses, email addresses, credit card details), detailed financials, contracts and agreements, clients' information, etc. |
| Charles Rutenberg Realty | · Nov 17, 2025 | Charles Rutenberg Realty, Inc., servicing Pinellas, Pasco, Hillsborough, & Hernando County real estate.We will upload 91gb of corporate documents soon. Their downloads folder contains so many personal docs (more than 1,5gb of just scanned docs), (passports, driver licenses, SSNs, phones, addresses, email addresses, credit card details, employee headshots), financials, contracts and agreements, NDA, clients' information, projects, etc. |
| LG Energy Solution | · Nov 17, 2025 | LG Energy Solution is a total energy solutions company that builds an energy ecosystem with customer-centric advanced technology, global integrated operations, and sustainable growth.We will upload almost 1.67TB of corporate documents and 46gb of SQL databases soon. Lots of employee personal information (visas, US and Korean passports, medical documents, Korean ID cards, addresses, phones, emails and so on), confidential projects, NDAs, confidentiality agreements, detailed financials, information about clients and partners, lots of contracts, etc. |
| Eagle Oil & Gas | · Nov 17, 2025 | Eagle Oil & Gas operates and manages its own properties and the assets of other companies, focusing on drilling new wells and optimizing legacy assets.We will upload 70gb of corporate documents soon. Employee personal documents (scanned passports, driver licenses, SSNs, phones, addresses, email addresses, credit card payment details and so on),confidential contracts and agreements, NDA, and other client's files, etc. |
| ARH Associates | · Nov 17, 2025 | ARH is an award-winning design engineering firm specializing in surveying, professional planning, environmental sciences, and GIS technologies.We will upload more than 12gb of corporate documents soon. Employee personal documents (scanned passports, driver licenses, SSNs, phones, addresses, email addresses, credit card details and so on), financials, contracts and agreements, NDA, client personal information, projects, etc. |
| BOLD Furniture | · Nov 17, 2025 | BOLD Furniture manufactures distinctive, highly functional and adaptable standard and custom furniture and fixtures for all kinds of work environments.We are going to upload company data soon. You will find financialdata (audit, invoices), project details, personal financial details of employees, accounting files. |
| MOBI Technologies | · Nov 17, 2025 | MOBI Technologies Inc. is a consumer health and home electronics brand committed to elevating the consumer experience around digital living and wellness monitoring for all ages. We are going to upload company data soon. You will find financialdata (audit, payment details, invoices), personal financial details of employees, accounting files. |
| A-B Communications | · Nov 14, 2025 | A-B Communications has been serving businesses since 1960, offering a range of services including professional answering, call center solutions, voicemail/IVR services, and secure messaging. We will upload corporate documents soon. Detailed personal employee information (about 100 persons or more), lots of scanned passports, DLs, SSNs, birth/death certs and so on. Contracts and agreements, NDAs, etc. |
| Barbizon Lighting Company, Roseburrough Tool, Mqd, McKay Empire, Victor Insulators. | · Nov 14, 2025 | We obtained about 15gb of the following companies:The Barbizon Lighting Company specializes in sales, integration and services of lighting and rigging equipment for houses of worship, live productions, performing arts, themed environments, film,and television. Roseburrough Tool Company, Inc. is a manufacturer and provider ofhigh-quality tools and construction supplies.MQD conducts independent, private, and accredited product testings and perform veterinary diagnostics and provide consulting services on hygiene,technology, and other quality-related issues.Ralph McKay Industries, Inc. specializes in manufacturing high-quality agricultural parts including discs, coulters, openers, sweeps, chisels, specialty items, and crop lifters.Victor Insulators is a leading manufacturer and seller of insulators, specializing in products made from standard strength silica porcelain and alumina.You will find personal employee, client, partner information, project files, accounting and financials and other internal operational files. |
| Aero Precision | · Nov 14, 2025 | Aero Precision is a firearm and components manufacturer.We will upload 24gb corporate documents soon. Employee information, project details, contracts and agreements, NDAs, specifications, etc. |
| Valley Banks | · Nov 14, 2025 | Valley Bank is a state chartered community bank, with branches inRonan, Arlee, Hot Springs, Thompson Falls, Pablo, Polson and Saint Ignatius.We will upload 294gb corporate documents soon. Employee information (scanned passports, driver licenses, hr docs with DOB, phones,addresses, credit card details and so on), contracts and agreements, NDAs, and other client's files, etc. |
| Waukegan Steel | · Nov 14, 2025 | Waukegan Steel is a structural steel fabricator serving the Midwest, specializing in high-quality steel fabrication since 1929. The company has worked on notable projects in the Chicago area, such as Soldier Field and Willis Tower, offering a complete range ofservices including structural, miscellaneous, and ornamental steel fabrication.We will upload almost 15gb of corporate documents soon. Scanned personal documents (passports, social security numbers, driver licenses, w-9 forms and so on), project information, NDAs, contractsand agreements, financials, client's information, lots of drawings of ongoing projects, etc. |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .