ZeroHour

akira

ransomware group · aka Akira, Akira_VP (Linux/VMware ESXi variant), HDK / 'How Daemons Kill' (reported rebrand of its Linux encryptor, 2024) · Unknown; believed to be Russian-speaking. Some researchers have speculated links to former Conti-affiliated operators (unconfirmed). · active since March 2023

Victims · 7d
9▲3 vs prev. week
Victims · 30d
41active targets
Victims · 90d
83
All-time (tracked)
1.5Ksince 2023-04-29
Last post
09-16 17:42UTC
Estimated earnings
Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since.public reporting
Profile · glm-5.3-flash · updated

Akira is a ransomware and data-extortion group first observed in March 2023, known for double extortion and a dedicated leak site used to pressure non-paying victims. It primarily targets small and mid-sized organizations across multiple sectors in North America and Europe, gaining initial access through SSL VPNs and edge appliances (notably Cisco ASA/FTD and SonicWall) often without multi-factor authentication. The group operates both Windows and Linux/VMware ESXi encryptors (Akira_VP) and, per 2025 vendor reporting, has used Windows Safe Mode reboots and attempted EDR tampering to evade defenses. The FBI and CISA estimated roughly $42 million in ransom proceeds as of March 2024 (source: FBI/CISA joint advisory, 2024). The group remains active, with this dashboard tracking five new leak-site victims in the past seven days (last post 2026-09-09).

Tactics & tooling
  • Initial access via SSL VPNs/edge appliances lacking MFA; exploits Cisco ASA/FTD (CVE-2023-20269) and SonicWall SonicOS (CVE-2024-40766); 2025 reporting also links affiliates to SonicWall SSL VPN zero-day exploitation.
  • Double extortion: data exfiltration followed by encryption; leak-site shaming of non-payers.
  • Dual-platform encryptors: Windows locker plus Linux/VMware ESXi variant (Akira_VP).
  • Exfiltration using cloud storage and transfer tools, including MEGA (MEGAsync) and Rclone, per FBI/CISA reporting.
  • EDR evasion: rebooting hosts into Windows Safe Mode to bypass security tooling; at least one affiliate crashed systems while attempting EDR tampering (2025).
  • Reported abuse of Microsoft Intune to push ransomware during deployment (2025 vendor research).
  • Credential-based access: compromised credentials, brute forcing, and purchases from initial access brokers, per FBI/CISA advisory.
  • Post-access reconnaissance with network-scanning utilities (e.g., Advanced IP Scanner) before lateral movement.
Targeted sectors
ManufacturingProfessional/business servicesHealthcareEducationConstructionFinanceIT servicesBroadly targets SMBs and mid-market organizations across critical infrastructure
Notable public victims

Stanford University (claimed October 2023), Nissan Oceania (claimed December 2023), Recent dashboard-tracked leak-site victims (September 2026): Kyodo USA, Brentwood Country Club, CreateASoft, Brent Electric, Stransky Heiz-Mess-Regeltechnik GmbH

Estimated earnings

Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. — FBI/CISA joint cybersecurity advisory AA24-109A (published May 2024), citing ~$42 million in ransom proceeds as of March 2024.

Leak-site victims

VictimDiscoveredDetails
Keystone Solutions Group · Oct 1, 2025Keystone Solutions Group is a medical device contract manufacturer and product development company based in Kalamazoo, Michigan. They provide a range of services including assembly, kitting, packaging, sterilization management, and clean room environments. Keystone specializes in managing customer product transfers and offers comprehensive solutions from prototypes to full-scale production. We are ready to upload more than 65GB data. There are lots of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), employees and customers information (passports, driver's license, Social Security Numbers,emails, phones) confidential information, NDAs and other documents with detailed personal information.
Cascade Pacific Pulp · Sep 30, 2025Cascade Pacific PulpCascade Pacific Pulp LLC is a leading market pulp mill located inthe Pacific Northwest, known for its environmentally progressivepractices. The company produces 200,000 tons per year of high-grade pulp, including products like Oregon Gold and White Gold, which are used in various applications such as tissue and printing papers. We are ready to upload more than 146GB data. There are lots of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), employees and customers information (passports, driver's license, Social Security Numbers, death certificate, emails, phones) confidential information, NDAs and other documents with detailed personal information.
Priester Aviation · Sep 30, 2025Priester Aviation is a leading provider of aircraft management and private jet charter services, based in Chicago, IL, and operating with nearly 200 years of combined experience in the industry.We are going to upload 124gb of corporate data. HUUUUUGE amount of employees (and their relatives) personal documents (passports, DLs and other docs with complete person information, medical testand other medical docs), crew personal documents, financials information, a bit of customer information, aircraft maintenance information, confidential contracts and agreements, numerous NDAs, etc.
Sinco · Sep 30, 2025Sinco, Inc. is a certified company specializing in sheet metal fabrication, offering a range of services including profiling, forming, welding, machining, and powder coating.We are going to upload 13gb of corporate data. Employee and customers information, complaints, financials information, lots of agreements and contracts, etc.
Pawling · Sep 30, 2025Pawling provides the following services: Architectural Products includes Impact Protection Systems Entrance Mats and Gratings Athletic Flooring Systems Heavy-Duty Impact Protection Systems Parking & Traffic Safety Products Presray includes Wateright Doors & Barriers Airtight Doors.We are going to upload 21gb corporate data. Detailed employee personal information (DOB, emails, titles, phones, addresses and so on), financials information, customer information, lots of agreements, etc.
Tom Duffy Company · Sep 30, 2025Tom Duffy Company specializes in floor covering and supplies offering flooring installation, Ceramic Tile & Stone Setting, and floor heating systems.We are going to upload 7 gb of corporate data. Employee information (names, DOB, address, emails, phones), customers and partners information, financials, lots of agreements and contracts, NDAs etc.
Midwest Industries, Inc · Sep 30, 2025Midwest Industries, Inc. designs, manufactures, and markets boats. The Company offers small fishing boats, cruisers, specialty trailers, pontoons, deck boats, utility trailers, specialty water crafts, and on-water storage for boats.We are going to upload of corporate data. Full employee information (names, DOB, address, emails, phones, SSNs, passports, medicalinformation and so on), financials, agreements, internal confidential files and other HR files.
Turf Care Store · Sep 30, 2025Turf Care Store is an independent, and privately held Canadian company that provides products and services to the golf course community, municipalities, parks departments, professional contractors, and authorized Toro and Kawasaki dealers.We are going to upload 30gb of their corporate data. Employee personal documents (passports, medical information, prescriptions, questionnaires and so on), other HR information, financials, agreements, internal confidential files, projects, clients information.
Bugnard · Sep 30, 2025Bugnard is a Swiss market leader for equipment used in the installation of electrical and telecommunication networks.We are going to upload 32gb of their corporate data. Financial documents, agreements, confidential files, projects, clients information, and lost of other files.
Sueba USA · Sep 30, 2025With over three decades of experience, a reputation for quality, and end-to-end expertise in developing luxury residential and commercial properties, SUEBA USA is an innovator in the real estate development market. We are going to upload 20gb of their corporate data. Lots of financial documents, detailed financials, clients documents, agreements, confidential files, projects, a bit of clients information, and of other files.
Von Paris Moving · Sep 30, 2025Von Paris Moving is a moving company that provides services in the moving and storage industry.We are going to upload corporate data. Employee detailed information (name, address, DOB, phones and so on), financials, clients documents, contracts and agreements, projects, and of other files.
Apex CoVantage · Sep 30, 2025Apex CoVantageThe company provides data conversion, prepress, content enhancement, and editorial services to publishers and both private and public libraries around the world.We are ready to upload more than 35GB files of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), employees and customers information (passports, death certificate, emails, phones) confidential information, NDAs and other documents with detailed personal information so on.
Alexander Bürkle · Sep 23, 2025Alexander Bürkle is a technology service provider & electrotechnical products retail seller that is headquartered in Germany.We are going to upload corporate data. Employees personal information (full names, DOB, address, emails, phones, identity cards scans), financials, customers information, NDAs, etc.
Markowitz Ringel Trusty & Hartog · Sep 22, 2025Markowitz Ringel Trusty & Hartog provide setvices as Restructuring Insolvency, Litigation Dispute Resolution, Real Estate Business, Probate Guardianship, and Trust Estates.We are going to upload 25gb corporate data. Huge amount of employees and clients information (full names, DOB, address, emails, phones, SSNs, DLs, death/birth certs and so on), legal files (police reports, hearings protocols and other court confidential files), financials, a bit of credit card information, NDAs, etc.
Jones Soda (Stock Symbol: JSDA) · Sep 19, 2025Jones Soda Co.® (CSE: JSDA, OTCQB: JSDA) is a leading craft soda manufacturer with a growing line of cannabis products.We are going to upload 66gb corporate data. Employee information (complete name, DOB, address, emails, phones, SSNs and so on), financials, payment details, credit cards details, numerous contracts and agreements (with PepsiCo and others), NDAs, etc.
About Ross, Brittain& Schonberg Co., Lpa · Sep 19, 2025Ross, Brittain & Schonberg specializes in Labor Law, Employment Law, Workers’ Compensation, and OSHA matters, representing management across various sectors.We are going to upload 66gb corporate data. Lots of legal files (police reports, hearings protocols and others), clients and employees documents and other personal information (Full names, DOB, address, emails, phones, SSNs, DLs and so on), financials, NDAs, etc. Very interesting data.
KCI Telecommunications · Sep 19, 2025KCI provides support services and turn-key solutions focused on exceeding their client’s Network, Resources Management and legacy support needs.We are going to upload corporate data. A lot of personal information of employees (DOB, address, emails, DL numbers, phones and soon), confidential files, payment details, numerous contracts andagreements, financials, customer information, NDAs, etc.
Gurney's Resorts · Sep 18, 2025Gurneys Montauk Resort & Seawater Spa is a luxury beach hotel located in Montauk, NY, offering 158 rooms, suites, and beachfront cottages with stunning ocean views. We are going to upload 20GB of corporate data. Employees' personal information (passports, addresses, SSNs, phones, emails, medical information and so on), client information (DOB, full name, phone, emails, room numbers, addresses and so on), finance and accounting files, NDAs, etc.
Hood Technology · Sep 18, 2025Hood Technology Corp is an engineering-oriented company based in Hood River, Oregon, specializing in the development of stabilizedgimbals for both manned and unmanned vehicles. We are going to upload corporate data. Lots of project files withdrawings and specifications, contracts with sound names like Ferrari, Toshiba, MAN, Siemens, Apex and other companies. Customer information, lots of NDAs, etc.
Ronald A/S · Sep 18, 2025Ronald A/S is an import company with 100 years of experience specializing in unique FMCG solutions within the nonfood sector. Their product offerings include fashion items, textiles, licensed merchandise, personal care products, and protective equipment. We are going to upload 320gb corporate data. Detailed employee information (Passport scans and other personal documents), lots of HR data, contracts and agreements, payment details, customer information, NDAs, etc.
Cook Brown · Sep 18, 2025Cook Brown LLP specializes in labor and employment law, providingcomprehensive legal representation to employers in areas such aslitigation, claims settlement, and labor relations.We are going to upload 160gb corporate data. Lots of client data where you can find at least 100 SSNs and other personal information, employee files (Passports and other personal documents), police reports, court documents, medical information, HR data, contracts and agreements, payment details and other financial information, NDAs, etc.
MMI Direct · Sep 18, 2025MMI Direct is a leading data processor that specializes in providing services like NCOA, PCOA, analytics, list fulfillment, merge purge, and data append to nonprofits, businesses, and government clients.We are going to upload 116gb corporate data. Employee files (Passports, DLs, birth and death certificates, interviews and other personal documents), medical information, HR data, contracts and agreements, financial information, client information, NDAs, etc.
Intellect Systems · Sep 18, 2025Intellect Systems provides solutions to the domestic and international resource, infrastructure, oil and gas, utilities and manufacturing markets. We are going to upload 10gb corporate data. Lots of employee information (passports, DLs, medical information, death and birth certificates), confidentiality agreements, contracts, financial information, project information and other files.
Wargo French · Sep 18, 2025Wargo French Singer is a full-service law firm with offices in Atlanta, Los Angeles and Miami. We are going to upload 11gb corporate data. Lots of client information (DOB, address, emails, phone and so on), lots of confidential files, contracts and agreements with Coca-cola and other big names, financial information, projects and other files.
CyberData · Sep 15, 2025CyberData Corporation is a leading OEM design and manufacturing firm with more than 40 years of experience. They specialize in IP Endpoints for the VoIP marketplace, VoIP and POS (Point-of-Sale) connectivity solutions, and POS protocol conversion technologies.We are going to upload 9GB of corporate data. Employees' personalinformation, client data, partners data, a bit of finance and accounting files, lots of project files, NDAs, etc.
TimHaahs · Sep 12, 2025THA Consulting is a DBE and W/MBE certified company that specializes in planning, design, and consultation services.We are going to upload 66GB of corporate data. Employees' personal documents (Passports, medical certificates, credit cards details), confidentiality agreements, payment details, finance and accounting files, clients information, projects, NDA etc.
Aluf Plastics · Sep 12, 2025Aluf Plastics is a prominent manufacturer and distributor of high-quality plastic products, specializing in trash bags, can liners, sheeting, and poly bags.We are going to upload 40GB of corporate data. Employees' personal information (Full personal info: address, phone, passport information, medical information, credit cards), confidentiality agreements, finance and accounting files, clients and customers information, NDAs, etc.
PYATOK · Sep 12, 2025PYATOK works to foster the development of vibrant, sustainable, inclusive communities through sensitive architecture and urban design, rigorous research and education, exemplary service and technical innovation, and thoughtful advocacy.We are going to upload 30GB of corporate data. Employees' personal information (USCIS forms with full info, medical information, credit cards), confidentiality agreements, payment details, finance and accounting files, clients information, projects, etc.
Brownstone Agency · Sep 12, 2025Brownstone Agency, Inc. offers a range of insurance products including property and general liability coverage, specifically tailored for brownstones, row houses, condominiums, and multi-family dwellings.We are going to upload 10GB of corporate data. Employee documents(Full name, DOB, addresses, zip and so on), lots of confidentialagreements, detailed finance and accounting files, lots of clients and customers information, etc.
Mazza Recycling Services · Sep 12, 2025Mazza Recycling Services is a leading waste recycling company based in New Jersey, specializing in innovative waste recycling solutions for residential, commercial, and industrial clients.We are going to upload 27GB of corporate data. They didn't even try to protect their employees' personal information (Full name, DOB, addresses, zip, DLs of at least 69 employees, SSNs, medical insurance policies and so on), confidentiality agreements, financeand accounting files, clients and customers information, NDAs, etc.
Commercial Casework · Sep 11, 2025Commercial Casework Inc. has been a leading provider of custom architectural woodwork and cabinetry in Northern California since 1976, situated in the San Francisco Bay Area. The company specializes in high-end tenant improvements for various commercial spaces, including Board Rooms, Cafes, and Reception Areas. We are going to upload 12GB of corporate data. A lot of hr data, medical information, accounting files, payment details, client information, project information, etc.
Venezia · Sep 11, 2025Venezia, headquartered in Limerick, PA, provides high quality transport & trucking services for the Liquid, Dry Bulk & Specialty commodities transportation industry to 48 states and Canada.We are going to upload 35GB of corporate data. Employee data (DOB, addresses, phones, emails, medical certificates, passports, driver licenses and so on), finance and accounting files, payment details, client information, project information, NDAs, etc.
STANDARD IRON & WIREWORKS (Helgesen Industries) · Sep 11, 2025STANDARD IRON & WIRE WORKS manufactures products in two distinct divisions. Contract Manufacturing fabricates, assembles and paints heavy-duty products for blue-chip original equipment manufacturers (OEMs) across numerous end markets including, agriculture, construction, power generation, industrial HVAC, among others.We are going to upload 40GB of corporate data. Employee data (SSNs, driver licenses, medical files and so on), finance and accounting files, payment details, customer information, contract and agreements, confidentiality agreements, NDAs, etc.
Fluxergy · Sep 11, 2025Fluxergy is developing a platform with multi-modal detection technologies which bring the variety of tests found in the central laboratory.We are going to upload 16GB of corporate data. Detailed employee data (lots of personal documents: SSNs, driver licenses, passports and so on), detailed finance and accounting files including confidential ones, lots of customer information, contract and agreements, confidentiality agreements, NDAs, etc.
Molod Spitz & DeSantis · Sep 11, 2025Molod Spitz & DeSantis, P.C. specializes in defending clients in complex liability matters in New York and New Jersey courts. The firm prides itself on being trial-ready, with a long record of successful verdicts and a commitment to tracking metrics that reflect their results. We are going to upload 62GB of corporate data. Employee documents, medical information, confidential agreements, lots of customersinformation, detailed finance and accounting files, lots of clients information, contract and agreements with customers, police reports, investigations, court hearings, NDAs, etc.
TDK Technologies · Sep 11, 2025TDK Technologies provides information technology consulting and custom software development for businesses through either staff augmentation or outsourced project solution delivery.We are going to upload company data soon. You will find financialdata (audit, payment details,financial reports, invoices), employees and customers information (passports, driver's license, SSN ) confidential information, NDAs and other documents with detailed personal information so on.
E&S Food · Sep 9, 2025E&S Food, Inc., was started in 1980 by Settimo Guttilla, selling grated cheese from his car and his first warehouse was his garage. Now utilizing a warehouse over 50,000 square feet, E&S has over3,000 products, and the company employs over 50 employees.We are going to upload 190GB of corporate data. A lot of financial and accounting data, credit card details, personal information of employees, client information, a bit of client data, NDAs, etc.
Fusion Homes · Sep 9, 2025Fusion Homes is a homebuilder dedicated to guiding customers through their Home Buying Journey.We are going to upload 15GB of corporate data. A lot of financialand accounting data, personal information of employees (DOB, address, email, phone and so on), client information, project information, etc.
General Converting · Sep 8, 2025General Converting, Inc. was founded in 1982 and was comprised then of three people, a 1 color press, a small die cutter, and a gluer. Today, the thriving GCI remains an independent company and now employs a staff of 65 people, most of whom have been with the company for 10 years and longer. We are going to upload 138 GB of corporate data. Employee personal information (name, DOB and is on), detailed financial data, confidential agreements, lots of customer files, NDAs, etc.
RBJ Escrow Software · Sep 8, 2025RBJ Escrow Software leverages 35 years of California escrow experience to provide advanced software solutions for escrow processing, title production, and trust accounting.We are going to upload 20GB of corporate data. A a lot of client data, HR files, detailed financial and accounting data, lots of files with personal data of employees, NDAs, etc.
Keller Laser AG · Sep 8, 2025Keller Laser AG – Expertise in sheet metal processing since 1995.Keller Laser AG is an owner-managed Swiss company and is now oneof the leading suppliers in industrial sheet metal processing.We are going to upload 9 GB of data. Almost all files are drawings. So, if you are interested, welcome.
Vardeco · Sep 8, 2025VARDECO SA specializes in high precision bar turning and screw machining, offering services for small, medium, and large custom series.We are going to upload 42 GB of corporate data. Employee personalfiles (passports, driver licenses, SSNs), project files, financial data, drawings and specifications, customer information, NDAs,etc.
Indo-MIM · Sep 5, 2025Indo-MIM s a manufacturer and supplier of precision-engineered products using Metal Injection Molding.We are going to upload 13 GB of corporate documents. A huge number of employee personal files (Full Name in Native Language, OtherNames Used, Telecode Name Used, Sex, Marital Status, Date of Birth, Place of Birth, Country/Region of Origin (Nationality), country/region of origin (nationality) above, National Identification Number, U.S. Social Security Number, U.S. Taxpayer ID Number, Home Address, City, State/Province, Postal Zone/ZIP Code), financialdata, project information, drawings and specifications, customerinformation and so on.
Michigan Sugar · Sep 5, 2025Founded in 1906 and headquartered in Bay City Michigan. Michigan Sugar manufactures granulated, powdered, liquid, and brown sugars.We are ready to upload more than 40GB files of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), employees and customers information (driver's license, death certificate, medical information, emails, phones) confidential information, NDAs and other documents with detailed personal information so on.
Spokane Produce · Sep 4, 2025Spokane Produce, Inc. is a family-owned business established in the 1940s, specializing in the distribution of high-quality fresh produce, cut fruits and vegetables, deli items, and floral arrangements. We are ready to upload more than 74GB files of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), employees and customers information (driver's license, birth certificate, medical information, emails, phones) confidential information, NDAs and other documents with detailed personal information so on.
Carus · Sep 4, 2025Carus provides solutions to environmental concerns involving water, air and soil with specializations in the area of chemical oxidation and sequestration.We are ready to upload more than 161GB files of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), employees and customers information (passports, credit cards, medical information, emails, phones) confidential information, NDAs and other documents with detailed personal information so on.
The Bank of Romney · Sep 3, 2025The Bank of Romney is a locally owned and operated community bankserving Hampshire County and surrounding areas since 1888. The bank offers a range of personal and business banking services, including checking and savings accounts, various loan options, and merchant services.We are going to upload corporate data soon. You will find financial information, clients information, a bit of accounting files, employee files, etc.
Jack Resnick & Sons · Sep 3, 2025Jack Resnick & Sons provide a variety of real estate availabilities, including notable residential buildings like Symphony House and Gracie Mews.We are going to upload corporate data soon. You will find lots ofcontracts and form containing clients DOB, addresses, phones, emails, financial and accounting files, payment details, and other data.
TSI Accessory Group,Stanley Creations Inc, iStar Jewelry, Roman & Sunstone. · Sep 3, 2025We are going to upload about 35 gb of essential corporate documents of a bunch of companies. You will find in the archives: financial data (audit, payment details,financial reports, invoices), employees and customers information (passports, Social Security Numbers, medical information, emails, phones) confidential information and other documents with detailed personal information so on.
Pooler Enterprises · Sep 2, 2025Pooler Enterprises is a seasoned provider of commercial land development services based in Fishers, NY, with over three decades ofexperience. We are ready to upload more than 15Gb files of essential corporate documents such as: financial data (payment details, invoices), employees and customers information (emails, phones, addresses) confidential information and other documents with detailed personal information so on.

In the newsAll →

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .