ZeroHour

akira

ransomware group · aka Akira, Akira_VP (Linux/VMware ESXi variant), HDK / 'How Daemons Kill' (reported rebrand of its Linux encryptor, 2024) · Unknown; believed to be Russian-speaking. Some researchers have speculated links to former Conti-affiliated operators (unconfirmed). · active since March 2023

Victims · 7d
9▲3 vs prev. week
Victims · 30d
41active targets
Victims · 90d
83
All-time (tracked)
1.5Ksince 2023-04-29
Last post
09-16 17:42UTC
Estimated earnings
Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since.public reporting
Profile · glm-5.3-flash · updated

Akira is a ransomware and data-extortion group first observed in March 2023, known for double extortion and a dedicated leak site used to pressure non-paying victims. It primarily targets small and mid-sized organizations across multiple sectors in North America and Europe, gaining initial access through SSL VPNs and edge appliances (notably Cisco ASA/FTD and SonicWall) often without multi-factor authentication. The group operates both Windows and Linux/VMware ESXi encryptors (Akira_VP) and, per 2025 vendor reporting, has used Windows Safe Mode reboots and attempted EDR tampering to evade defenses. The FBI and CISA estimated roughly $42 million in ransom proceeds as of March 2024 (source: FBI/CISA joint advisory, 2024). The group remains active, with this dashboard tracking five new leak-site victims in the past seven days (last post 2026-09-09).

Tactics & tooling
  • Initial access via SSL VPNs/edge appliances lacking MFA; exploits Cisco ASA/FTD (CVE-2023-20269) and SonicWall SonicOS (CVE-2024-40766); 2025 reporting also links affiliates to SonicWall SSL VPN zero-day exploitation.
  • Double extortion: data exfiltration followed by encryption; leak-site shaming of non-payers.
  • Dual-platform encryptors: Windows locker plus Linux/VMware ESXi variant (Akira_VP).
  • Exfiltration using cloud storage and transfer tools, including MEGA (MEGAsync) and Rclone, per FBI/CISA reporting.
  • EDR evasion: rebooting hosts into Windows Safe Mode to bypass security tooling; at least one affiliate crashed systems while attempting EDR tampering (2025).
  • Reported abuse of Microsoft Intune to push ransomware during deployment (2025 vendor research).
  • Credential-based access: compromised credentials, brute forcing, and purchases from initial access brokers, per FBI/CISA advisory.
  • Post-access reconnaissance with network-scanning utilities (e.g., Advanced IP Scanner) before lateral movement.
Targeted sectors
ManufacturingProfessional/business servicesHealthcareEducationConstructionFinanceIT servicesBroadly targets SMBs and mid-market organizations across critical infrastructure
Notable public victims

Stanford University (claimed October 2023), Nissan Oceania (claimed December 2023), Recent dashboard-tracked leak-site victims (September 2026): Kyodo USA, Brentwood Country Club, CreateASoft, Brent Electric, Stransky Heiz-Mess-Regeltechnik GmbH

Estimated earnings

Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. — FBI/CISA joint cybersecurity advisory AA24-109A (published May 2024), citing ~$42 million in ransom proceeds as of March 2024.

Leak-site victims

VictimDiscoveredDetails
Boyer · Oct 28, 2025Boyer Company is a leading commercial real estate development andconstruction management firm based in the Western United States.We will upload more than 13gb of corporate documents soon. Clientinformation, detailed accounting and financials, w-9 forms with personal information, lots of agreements and other internal docs.
Bergman Dacey Goldsmith · Oct 28, 2025BDG Law Group is a full-service law firm based in Los Angeles, specializing in business litigation, construction law, real estate,and various other legal services. We will upload 110 GB of corporate documents soon. Complete personal information of employees and clients (phones, emails, addresses, driver licenses, passports, social security numbers, confidential legal files, court hearings, police reports, medical information and is on), accounting and financials, NDA, etc.
Axelson WilliamowskyBender & Fishman · Oct 28, 2025Axelson, Williamowsky, Bender & Fishman, P.C. is a full-service law firm serving the Washington Metropolitan Area with over 100 years of combined experience. They offer a wide range of legal services including personal injury, family law, estate planning, realestate, and business law. We are ready to upload more than 100GB data. There are lots of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), detailed employees and customers information (passports, driver's license , Social Security Numbers, medical information, emails, phones) confidential information, NDAs and other documents with detailed personal information.
Engineered Profiles · Oct 27, 2025Engineered Profiles specializes in high-quality plastic extrusion, design, and advanced manufacturing technologies.We are ready to upload more than 56gb of corporate documents. Employee information (social security cards, driver licenses, medical information, addresses, phones and so on), projects, customer information, accounting, confidentiality agreements, NDA, etc.
SK group, Za Za Bazaar, TH UK & Ireland Ltd and a few more. · Oct 27, 2025You will get access to files these companies soon. Here is what we got: 70gb of corporate documents. We've taken lots of personal files (passports, social security cards, driver licenses, medicalinformation, address, phones and other information of numerous people), confidential files, projects, customer information, detailed accounting, confidentiality agreements, NDA, etc.
Flegenheimer International · Oct 27, 2025Flegenheimer International is Licensed Customs Broker company based out of 227 W Grand Ave, El Segundo, CA, United States.We are ready to upload more than 16gb of corporate documents. Employee information (address, phones and so on), customer information, accounting and other business files.
Precision Machined Products · Oct 25, 2025Precision Machined Products is a tier one supplier of downhole equipment for the Oil and Gas Industry.We are ready to upload more than 12gb of corporate documents. Employee information and other HR files, projects, internal confidential files, clients confidential files, lots of specifications and drawings, NDA, etc.
MetroWest Community FCU · Oct 25, 2025MetroWest Community Federal Credit Union offers a range of personal banking services including checking and savings accounts, mobile banking, and various lending products such as vehicle, home, and personal loans.We are ready to upload corporate and client documents. Lots of clients documents (DLs, birth and death certs and numerous forms with personal information), financial and accounting information, court cases information, employee personal files, etc.
Pacific West SystemsSupply · Oct 21, 2025Proudly known as "PacWest," Pacific West Systems Supply Ltd. is aleading Wall and Ceiling Industry supplier.We are ready to upload 224gb of corporate documents. Detailed employee information (Passport, DLs, SSNs, birth certs and so on), financial and accounting information, a bit of client information,projects, NDAs, etc.
Mailing.com · Oct 21, 2025Mailing.com is a printing and mailing company that offers services in Lithographic Printing, Digital Printing, Mailing Services, Art and Design and more.We are ready to upload 40gb of corporate documents. Employee personal information (Full name, DOB, address and so no), same information of their VIP clients, drawing and specifications, etc.
Nvno · Oct 21, 2025Napierski, VanDenburgh, Napierski & O'Connor, L.L.P. is a leadingcivil litigation firm based in Albany, NY, specializing in various legal areas including medical malpractice defense, personal injury, and employment law.We are ready to upload about 6gb of corporate documents. There are SO MUCH personal documents. Full information of at least 150 oftheir clients (Full name, DOB, address, passport numbers, SSNs, DLs and so no). Employee personal information (DOB, addresses, phones, salaries and other information), a lot of court cases including ransomware and others, corporate information of dozens of companies will be uploaded. Stay tuned.
Selig Enterprises; AAA Parking · Oct 20, 2025There are two companies in the upcoming leak. Selig Enterprises is a real estate company that has a portfolio of more than 15 million square feet of retail, industrial, residential, hotel, office, and mixed-use properties throughout the Southeast. And AAA Parking, headquartered in Atlanta, Georgia, and established in 1956, is a parking management company.We are ready to upload 81gb of corporate documents of these two companies. Employee personal documents (passports, DLs), clients personal information (Full name, DOB, SSN, phone and so on), detailed accounting and financials, credit cards details, projects (confidential ones), drawing and specifications, NDAs, police reports and other interesting information.
Manko Window Systems · Oct 17, 2025Manko Window Systems is a manufacturer of commercial windows, aluminum systems, and glass products.We are ready to upload 20gb of corporate documents. Client personal information (SSNs, DOB, phones and other docs), employee information, accounting and financials, projects, drawing and specifications, detailed information on their products, NDAs, etc.
Tenryu America · Oct 17, 2025Tenryu America, Inc. is a leading manufacturer of high-quality saw blades, offering over 3,000 types of carbide blades suitable for woodworking, metalworking, plastic cutting, and machining composite materials.We are ready to upload corporate documents. Employee information (DOB, addresses, phones and so on), a bit of client data, financials, contracts, NDAs, etc.
Curtis Steel Co · Oct 17, 2025Curtis Steel Aluminum Co. is a leading tubing supplier based in Las Vegas, providing high-quality metal and steel products, including aluminum, carbon steel, stainless steel, and welding supplies. The company offers various precision services such as steel cutting, laser cutting, metal drilling, and hole punching, catering to both commercial and individual clients since 1970. We We are ready to upload more than 20GB data. There are lots of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), detailed employees andcustomers information ( Dl numbers, Social Security Numbers, medical information, emails, phones) confidential information, NDAs and other documents with detailed personal information.
Consolidated Restaurant Operations, Inc. · Oct 17, 2025Consolidated Restaurant Operations, Inc. (CRO) operates more full-service and franchise restaurants internationally in addition tocatering events.We are ready to upload 38gb of corporate documents. Scans of employee documents (Passports, driver licenses, medical information, SSNs and other docs), lots of confidentiality agreements, detailed financials, NDAs, police reports, etc.
Plastics Extrusion Machinery · Oct 17, 2025Plastics Extrusion Machinery LLC, known as PEM, is a leading provider of innovative downstream equipment tailored for the PVC pipeand custom profile industries. We We are ready to upload more than 350GB data. There are lots ofessential corporate documents such as: financial data (audit, payment details,financial reports, invoices), detailed employees and customers information ( Dl numbers, Social Security Numbers, medical information, emails, phones) confidential information, NDAsand other documents with detailed personal information.
Ostrolenk Faber · Oct 14, 2025Ostrolenk Faber LLP is a premier intellectual property boutique law firm that has been specializing in domestic and international intellectual property legal matters since 1929.We are ready to upload more than 43gb of corporate documents. Employees personal documents, scans of customer documents (SSNs, name, DOB, address and so on), project files, lots of client information, financials, confidential project files, contracts and agreements, NDAs, etc.
Art Guild · Oct 14, 2025Art Guild is a full-service provider of face-to-face marketing and educational programs.We are ready to upload 24gb of corporate documents. Lots of HR files with employee information (DOB, addresses, phones, medical test and so on), a bit of client data, financials, contracts, confidential project files, NDAs, etc.
Plast-O-Matic Valves · Oct 14, 2025Plast-O-Matic Valves, Inc. specializes in the development and manufacturing of high-quality thermoplastic valves and controls for various industries, including agriculture, chemical processing, wastewater treatment, and semiconductor applications.We are ready to upload 51gb of corporate documents. Employees personal documents (DLs and others), lots of HR forms, clients information, financial and accounting data, NDAs, etc.
Blood Bank Computer Systems · Oct 14, 2025BBCS Inc specializes in innovative blood banking software and biologics management solutions, designed to enhance operational workflows and decision-making for healthcare providers.We are ready to upload 20gb of corporate documents. Detailed employees personal documents scans (passports, DLs, SSNs, w-9 forms, credit card details and so on), confidential HR forms, clients information, medical information, financial and accounting data, contracts and agreements, NDAs, etc.
Business Integra · Oct 14, 2025Business Integra provides solutions for scientific, engineering, information technology, cyber-security, and more.We are ready to upload 16gb of corporate documents. Detailed employees personal information (complete I-9 forms, passports, DLs, SSNs, address, emails and so on), customers/clients information, financials, NDAs, etc.
Five Star MechanicalInc. · Oct 10, 2025Five Star Mechanical Inc. specializes in providing commercial andindustrial HVAC services, plumbing, piping, and sheet metal fabrication.We are ready to upload 30gb of corporate documents. Employee and owners personal information (passports, DLs, SSNs, address, emails and so on), customers files, projects, financials and other operating files.
Carlson Building Maintenance · Oct 10, 2025Carlson Building Maintenance specializes in commercial cleaning services throughout the Midwest, offering a variety of solutions including general cleaning, hard floor care, carpet cleaning, and specialty services. They serve diverse industries such as retail,grocery, schools, and warehouses, tailoring their cleaning programs to meet the specific needs of each facility. We are ready to upload more than 20GB of there data. There are lots of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), employees and customers information (passports, driver's licenses, emails, phones), confidential information and other documents with personal information.
Northern Air Systems · Oct 9, 2025Northern Air Systems has been a leading manufacturer of high-quality HVAC systems for commercial and industrial applications for nearly three decades.We are ready to upload 22gb of corporate documents. Client data (DLs, addresses, emails), employee information (DLs, emails, phones and so on), lots of projects information.
SG Ceresco · Oct 9, 2025Ceresco specializes in the production and provision of genetically pure soybean seeds for Canadian farmers, offering both conventional and organic options. The company acts as an intermediary between soybean producers and food processors, ensuring high-qualityservice and personalized solutions.We are ready to upload 38gb of corporate documents. Human resources, customer information, project information, internal confidential files, detailed financials, NDA, etc.
Legal & Contingency · Oct 9, 2025Legal & Contingency (L&C) is a leading provider of Legal Indemnity Insurance coverage for both residential and commercial properties. With a strong reputation in the market, we offer comprehensive protection via our Ci Online and Bespoke offerings.We are ready to upload 237gb of corporate documents. Lots of employee personal files (passports, DLs and so son), client information (passports, DLs, birth/death certs and so on), hearings, police reports, and other confidential files. Their reputation is not strong anymore.
Cerenade · Oct 8, 2025Cerenade Technology is a leader in providing cloud-based solutions for immigration law firms, offering products such as eIMMIGRATION, eCMS, and eForms Solutions. Their software aims to automate workflows, manage cases and clients, and ensure compliance for legal and government organizations.This is a very special case. We obtained almost 100gb of their clients scanned documents (43,000 passports and 15,000 visas). Thousands of adults and kids are going to suffer because of this leak. We got documents of people from India, USA, Mexico, Middle Eastcountries, Japan and other countries around the globe. It appears that Cerenade's software automates personal fraud schemes.
DataStream Content Solutions · Oct 8, 2025As the premier content concierge, DataStream Content Solutions provides comprehensive information management solutions that allowsyou harness the power of data. We are ready to upload corporate documents. Customer files, project information and other files. Be careful when working with thembecause they allow everyone to access your data.
St Peter Law Offices · Oct 8, 2025St. Peter O’Brien Law Offices, P.C. is a law firm that specializes in various areas of law, including adoption, business formationand compliance, estate planning, real estate, tax law, general litigation, and guardianships.We are ready to upload 188gb of corporate documents. Employee personal documents (DLs, financials and other docs), customer files (DLs, SSN numbers, credit card details, payment details, medical records and so on), project information, financial and accountinginformation, NDAs, etc.
Hoyer Law Group · Oct 8, 2025Hoyer Law Group, PLLC is a nationwide law firm specializing in employment legal services, advocacy for victims of employment discrimination, harassment, wrongful termination, and help whistleblowers navigate legal complexities while safeguarding against retaliation.We are ready to upload corporate documents. Customer personal documents (a bit of personal docs, correspondence and other docs), employee files (w4 complete forms, SSNs, phones, addresses and so on), project information, medical reports, police reports, and other confidential documents, NDAs, etc.
VIM Technologies · Oct 8, 2025VIM Technologies, Inc. is a leading provider of compliance monitoring software solutions and support services tailored for the electric utility and industrial markets.We are ready to upload corporate documents. Customer information,partners files, projects, contracts and agreements, employee files (I-9 forms and other data), NDA, etc.
J Lorber · Oct 7, 2025J. Lorber Company specializes in a wide range of plumbing, HVAC, and hydronics products, including water heaters, fixtures, and heating systems.We are going to upload 45gb of data soon. Personal documents of customers (DLs, addresses, credit card details and so on), employee information (names, DOB and other information), financial and accounting files, contracts, agreements, projects, NDAs, etc.
Harbor Diesel & Equipment · Oct 7, 2025Harbor Diesel and Equipment, Inc. primarily operates as the Southwestern Distributor of ZF Heavy Duty Off-Highway and On-Highway Driveline Products, the Southern California Dealer for Capacity ofTexas Trailer Jockeys and Factory Authorized Full-Service Dealerfor Cummins, Caterpillar (Truck and Marine), Detroit Diesel and John Deere Natural Gas On-Highway Engines. We are going to upload 7gb of data soon. Customers information, w9 forms, detailed employee information, detailed financial and accounting files, contracts, agreements, etc.
Lautrec · Oct 7, 2025Lautrec is based out of the United States with an office operating in Alberta, Canada. Lautrec offers new and pre-owned manufactured homes, apartments, townhomes, and RV rental sites. Their communities offer swimming pools, sports facilities, and a community clubhouse.We are ready to upload more than 18GB of there data. There are lots of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), employees and customers information (passports,driver's license, Social Security Numbers, birth certificates, emails, phones) confidential information and other documents with detailed personal information.
Milliman Financial Risk Management LLC (Milliman, Inc. subsidiary) · Oct 6, 2025Milliman Financial Risk Management LLC is a global leader in financial risk management to the retirement savings industry. Established in 1998, the practice includes over 200 professionals operating from three trading platforms around the world (Chicago, London, and Sydney). Milliman FRM is a subsidiary of Milliman, Inc.We are going to upload 260gb of corporate data soon. Client information (clients' financial portfolios, account balances, transfers and so on), lots of internal operating files, financial and accounting files, contracts, agreements, projects, etc.
Daily Printing · Oct 6, 2025Daily Printing provides commercial printing services, digital printing, variable data printing, web-to-print, and print on demand services.We are going to upload 32gb of data soon. Client information, a bit of employee files, lots of internal operating files, financialand accounting files, contracts, agreements, projects, etc.
Orion Engineering · Oct 6, 2025Daily Printing provides commercial printing services, digital printing, variable data printing, web-to-print, and print on demand services.We are going to upload 32gb of data soon. Internal confidential information containing client personal information (SSNs, address,email addresses and so on), employee information (w9 forms), financial and accounting files, contracts, agreements, clients' engineering specifications and drawings, projects, etc.
Ludlow Construction · Oct 6, 2025Ludlow Construction Co. Inc. is a business specializing in underground infrastructure, roadway construction, and site development with over 25 years of experience. They offer services including road construction, sewer, water, storm utilities installation, site development, and curbing concrete.We are going to upload 205gb of corporate data soon. Detailed employee information (Names, DOB, DLs of almost all the employees, medical certificates, passports and other docs scans), financial and accounting files, correspondence with authorities, contracts, agreements, projects with specifications, etc.
Natoli Engineering · Oct 6, 2025Natoli Engineering is a renowned leader in tablet compression tooling with over fifty years of expertise in manufacturing high-quality punches and dies. They offer a range of products including tablet presses, encapsulation machines, and replacement parts, alldesigned to meet the needs of research and production in the pharmaceutical industry.We are ready to upload more than 936GB data. There are lots of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), employees and customers information (passports,driver's license, Social Security Numbers,death/birth certificates, emails, phones) confidential information, NDAs and other documents with detailed personal information.
Saskarc · Oct 6, 2025Saskarc Inc's focus industries include petro chemical, oil and gas refineries, mining, power generation, and food processing. We are ready to upload more than 54GB data. There are lots of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices) Confidential information and other documents with detailed personal information.
DSA · Oct 3, 2025Founded in 1963, & based out of Pennsylvania, Data Systems Analysts is a company that provides information technology & consultingsolutions services with locations in Feasterville, PA, Aberdeen,MD, Tinton Falls, NJ, Fairfax, VA & McLean, VA.We are ready to upload more than 19GB data. There are lots of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), employees and customers information (passports, Social Security Numbers, emails, phones) confidential information, NDAs and other documents with detailed personal information.
Sobotec · Oct 3, 2025Sobotec was founded in 1988 with a vision to produce the best modern wall panel systems available. That vision, coupled with a strong engineering background and a commitment to innovation, led Sobotec to become the first company worldwide to design and developa Rainscreen Wall Panel System (SL-2000) for the metal compositematerial (MCM) ALUCOBOND®. We are ready to upload more than 277GB data. There are lots of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), employees and customers information (passports, Social Security Numbers, emails, phones) confidential information, NDAs and other documents with detailed personal information.
Milburn · Oct 3, 2025Milburn is a General Demolition contractor out of Chicago, Illinois. They deploy the latest in demolition technology and equipmentwith a fleet of Bobcat skid steers and Brokk remote demolition robots that can tackle everything from structural slab demolition to full interior strip-outs. We are ready to upload more than 16GB data. There are lots of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), (passports, driver's license, SSNs , emails, medical information, medical cards) Confidential information and other documents with detailed personal information.
Field and Goldberg · Oct 3, 2025Field and Goldberg, LLC is a law firm located in Chicago specializing in real estate taxation, transactions, and litigation. The firm provides comprehensive legal services to a range of clients including condo associations, commercial properties, banks, and apartment buildings. We are ready to upload more than 232GB data. There are lots of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), project details, personal financial details of employees, accounting files. Confidential information, NDAs and other documents with detailed personal information.
Xebec Building · Oct 2, 2025Xebec Building Company is a premier design build and general construction firm, providing services throughout the major Los Angeles and Southern California submarkets.We are going to upload corporate data soon. Detailed employee information (Name, DOB, DLs and other docs), financial and accounting files, clients and customers information, contracts and agreements, projects, lots of policies, etc.
Dual Temp · Oct 2, 2025Dual Temp is a leader in mechanical engineering specializing in design, build and service of HVAC/R, Plumbing and Automated Building Control Systems in Eastern Pennsylvania.We are going to upload corporate data soon. Detailed employee information (DLs of more than 100 employees, photos and other employee files), detailed financials, information about customers, confidentiality agreements, projects, NDA, etc.
Displayit · Oct 2, 2025DisplayIt specializes in designing and fabricating custom displays, casework, and signage tailored for various industries including retail, healthcare, restaurants, and technology.We are going to upload 105gb of corporate data. Employee information, financials, clients confidential files, contracts and agreements, projects (lots of Starbucks project files), and of other data.
Apricorn · Oct 2, 2025Apricorn provides secure storage innovations worldwide to companies and organizations seeking the ultimate protection for their data at rest.We are going to upload corporate data soon. Detailed employee information (lots of medical records, tests, EEGs, MRIs, CTs, SSN scans and other personal information), financials, information about clients, contracts and agreements, projects, NDA, etc.
Barr and Barr · Oct 1, 2025Barr & Barr, Inc is a construction management company that provides building information modeling & construction management.We are going to upload 323gb of corporate data. Employee detailedinformation (name, address, DOB, phones, scanned passports, DLs,death reports and so on), financials, clients information, contracts and agreements, projects, and of other files.

In the newsAll →

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .