akira
ransomware group · aka Akira, Akira_VP (Linux/VMware ESXi variant), HDK / 'How Daemons Kill' (reported rebrand of its Linux encryptor, 2024) · Unknown; believed to be Russian-speaking. Some researchers have speculated links to former Conti-affiliated operators (unconfirmed). · active since March 2023
Victims · 7d
12▲6 vs prev. week
Victims · 30d
44active targets
Victims · 90d
86
All-time (tracked)
1.5Ksince 2023-04-29
Last post
09-17 17:39UTC
Estimated earnings
Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since.public reporting
Profile · glm-5.3-flash · updated
Akira is a ransomware and data-extortion group first observed in March 2023, known for double extortion and a dedicated leak site used to pressure non-paying victims. It primarily targets small and mid-sized organizations across multiple sectors in North America and Europe, gaining initial access through SSL VPNs and edge appliances (notably Cisco ASA/FTD and SonicWall) often without multi-factor authentication. The group operates both Windows and Linux/VMware ESXi encryptors (Akira_VP) and, per 2025 vendor reporting, has used Windows Safe Mode reboots and attempted EDR tampering to evade defenses. The FBI and CISA estimated roughly $42 million in ransom proceeds as of March 2024 (source: FBI/CISA joint advisory, 2024). The group remains active, with this dashboard tracking five new leak-site victims in the past seven days (last post 2026-09-09).
Tactics & tooling
- Initial access via SSL VPNs/edge appliances lacking MFA; exploits Cisco ASA/FTD (CVE-2023-20269) and SonicWall SonicOS (CVE-2024-40766); 2025 reporting also links affiliates to SonicWall SSL VPN zero-day exploitation.
- Double extortion: data exfiltration followed by encryption; leak-site shaming of non-payers.
- Dual-platform encryptors: Windows locker plus Linux/VMware ESXi variant (Akira_VP).
- Exfiltration using cloud storage and transfer tools, including MEGA (MEGAsync) and Rclone, per FBI/CISA reporting.
- EDR evasion: rebooting hosts into Windows Safe Mode to bypass security tooling; at least one affiliate crashed systems while attempting EDR tampering (2025).
- Reported abuse of Microsoft Intune to push ransomware during deployment (2025 vendor research).
- Credential-based access: compromised credentials, brute forcing, and purchases from initial access brokers, per FBI/CISA advisory.
- Post-access reconnaissance with network-scanning utilities (e.g., Advanced IP Scanner) before lateral movement.
Targeted sectors
ManufacturingProfessional/business servicesHealthcareEducationConstructionFinanceIT servicesBroadly targets SMBs and mid-market organizations across critical infrastructure
Notable public victims
Stanford University (claimed October 2023), Nissan Oceania (claimed December 2023), Recent dashboard-tracked leak-site victims (September 2026): Kyodo USA, Brentwood Country Club, CreateASoft, Brent Electric, Stransky Heiz-Mess-Regeltechnik GmbH
Estimated earnings
Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. — FBI/CISA joint cybersecurity advisory AA24-109A (published May 2024), citing ~$42 million in ransom proceeds as of March 2024.
Leak-site victims1,494 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Jack Resnick & Sons | · Sep 3, 2025 | Jack Resnick & Sons provide a variety of real estate availabilities, including notable residential buildings like Symphony House and Gracie Mews.We are going to upload corporate data soon. You will find lots ofcontracts and form containing clients DOB, addresses, phones, emails, financial and accounting files, payment details, and other data. |
| TSI Accessory Group,Stanley Creations Inc, iStar Jewelry, Roman & Sunstone. | · Sep 3, 2025 | We are going to upload about 35 gb of essential corporate documents of a bunch of companies. You will find in the archives: financial data (audit, payment details,financial reports, invoices), employees and customers information (passports, Social Security Numbers, medical information, emails, phones) confidential information and other documents with detailed personal information so on. |
| Pooler Enterprises | · Sep 2, 2025 | Pooler Enterprises is a seasoned provider of commercial land development services based in Fishers, NY, with over three decades ofexperience. We are ready to upload more than 15Gb files of essential corporate documents such as: financial data (payment details, invoices), employees and customers information (emails, phones, addresses) confidential information and other documents with detailed personal information so on. |
| Natare | · Sep 2, 2025 | Natare Pools specializes in designing, building, and installing custom stainless steel pools, spas, and related equipment for various applications including competition, commercial, and communityuse. We are ready to upload more than 10Gb files of essential corporate documents such as: financial data (audit, payment details, financial reports invoices), employees and customers information (emails, phones, addresses) confidential information and other documents with detailed personal information so on. |
| Genmark Automation | · Sep 1, 2025 | Founded in 1985 and headquartered in California. Genmark Automation is a worldwide developer and manufacturer of tool and fab automation equipment solutions for the semiconductor, flat panel, solar, LED, data storage, and associated industries.We are ready to upload more than 47Gb files of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), employees and customers information (green cards, passports, driver's license, Social Security Numbers, credit cards, death/birth certificate, medical information, emails, phones, addresses) confidential information, NDAs and other documents with detailed personal information so on. The company management refused to take the situation seriously. So their employees and customers will have to face all the consequences of their data being compromised. |
| Automated Business Solutions | · Sep 1, 2025 | Automated Business Solutions, Inc. is a designer and supplier of office equipments and comprehensive business solutions.We are ready to upload more than 93Gb files of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), employees and customers information (credit cards, death certificates, medical information, emails, phones, addresses) confidential information, NDAs and other documents with detailed personal information so on. |
| RMO | · Aug 29, 2025 | RMO Orthodontics is a leading manufacturer and supplier of innovative and high-quality orthodontic instruments and supplies. They offer a comprehensive catalog of products including brackets, archwires, and accessories, catering primarily to orthodontic professionals. We are going to upload company data soon. You will find financialdata (audit, payment details,financial reports, invoices), employees and customers information (passports, emails, phones, SocialSecurity Cards, birth certificate) confidential information, NDAs and other documents with detailed personal information so on. |
| The Fredericks | · Aug 29, 2025 | The Fredericks Company is a leading manufacturer and innovator specializing in tilt and vacuum measurement sensors. We are going to upload company data soon. You will find financialdata (audit, payment details,financial reports, invoices), employees and customers information (emails, phones) confidential information, NDAs and other documents with detailed personal information so on. |
| Echo | · Aug 27, 2025 | Echo is an industry leader in the design, marketing and distribution of home and fashion accessories. Echo is as diverse in its color palette and patterns as it is rich in its family heritage andhistory. Since 1923, Echo has focused on the principles of creativity, service, innovation and quality established by its founders, Edgar and Theresa Hyman.We are ready to upload more than 331GB files of essential corporate documents such as: financial data (audit, payment details, invoices), employees and customers information (driver's license, Social Security Numbers, phones, emails, death/birth certificate, medical information) confidential information, NDAs and other documents with detailed personal information so on. |
| Ben's Asphalt | · Aug 27, 2025 | Ben's Asphalt is an asphalt maintenance & parking lot management company in Southern California with a national presence. The company was founded in 1961 and is headquartered in Santa Ana.We are ready to upload more than 100GB files of essential corporate documents such as: financial data (audit, payment details, invoices), employees and customers information (phones, emails, medical information) confidential information, NDAs and other documents with detailed personal information so on. |
| Baycoat | · Aug 27, 2025 | Baycoat is currently the largest steel coil coater in Canada. Baycoat employs a workforce of approximately 175, operating two coating lines that are capable of accommodating numerous paint systems, offering well over 1,000 colours.We are going to upload about 19gb of corporate files. You will find passports and DLs of employees, personal and corporate financial information, medical information, accounting (payment details,reports and so on), confidential agreements and contracts, NDA, etc. |
| Colabor | · Aug 24, 2025 | Colabor provides grocery distribution and wholesale services. Their headquarters are located in Boucherville, Quebec, Canada.Trading Ticker Symbol: GCLWe are going to upload about 60gb of corporate files. You will find lots of documents and forms with personal data of more than 300 employees including scanned docs (DOB, Canadian passports, addresses, SSNs, phones, emergency phones, emails, medical information and so on), detailed financial and accounting information (credit cards information with security codes, payment details, customers files, employee financial information), agreements and contracts, NDAs, etc. |
| Mark Edward Partners | · Aug 22, 2025 | Mark Edward Partners is an independent full-service internationalbrokerage firm that offers comprehensive insurance solutions to a diverse clients.We are going to upload about 6gb of corporate files. You will find lots of client information, some documents contain personal information, numerous confidentiality agreements and contracts, NDAs, etc. |
| Carmichael Engineering | · Aug 22, 2025 | Carmichael Engineering provides commercial air-conditioning and heating, industrial refrigeration, building automation, and scientific equipment services.We are going to upload about 10gb of corporate files. You will find passports and DLs of a few dozens of employees, financial and accounting information (payment details, employee financial information, budgets, reports and so on), confidential files, agreements and contracts, etc. |
| Hill Peterson CarperBee & Deitzler | · Aug 22, 2025 | The Law Firm of Hill, Peterson, Carper, Bee & Deitzler, PLLC, began in 1980, when senior partner, R. Edison Hill, departed a largecorporate and insurance defense firm to begin a small personal injury practice. Today, our team of skilled attorneys engage exclusively in representing personal injury victims.We are going to upload company data soon. You will find financialdata (payment details, invoices),confidential information and other documents with personal information so on. A bit of personal files and customers data. |
| Exotherm | · Aug 22, 2025 | Exotherm Corporation is a leader in the development and manufacture of custom-made heating devices. They produce Uniflux brand convection heaters.We are ready to upload more than 30GB files of essential corporate documents such as: financial data (audit, payment details, invoices), employees and customers information (Social Security Numbers, phones, medical information) confidential information, NDAs and other documents with detailed personal information so on. |
| Hogan Construction Group | · Aug 22, 2025 | Hogan Construction Group is a company that provides a comprehensive platform of value-based, client-focused construction management services. It offers interior renovations, design and bid-Build,historic restorations, and adaptive re-use.We are ready to upload more than 16GB files of essential corporate documents such as: financial data (audit, payment details, invoices), employees and customers information (Social Security Numbers, phones, emails, death/birth certificate ) confidential information and other documents with detailed personal information and so on. |
| Blazer Building | · Aug 21, 2025 | Blazer Building is a general construction company that specializes in the expedited delivery of high-quality apartment homes.We are going to upload about 10gb of corporate files. You will find employees information (DOB, addresses, SSNs, phones, even petsnames and so on), HR files, detailed financial and accounting information (customers files), agreements and contracts, employee financial information, violation reports, police reports, etc. |
| Burt Process Equipment | · Aug 21, 2025 | Burt Process Equipment is a leader in the worldwide community of people, businesses, and organizations striving to create a betterenvironment through the innovative and responsible use of water and natural resources. We are going to upload about 19gb of corporate files. You will find employees information (DOB, addresses, SSNs, phones, emails and so on), HR files, detailed financial and accounting information(customers files, employee financial information, payment details), lots of scanned docs with personal data, agreements and contracts, NDAs, etc. |
| RA Services | · Aug 20, 2025 | RA Services offer a comprehensive line of medical business solutions to help your practice or healthcare facility achieve its financial and strategic goals.We are ready to upload more than 15GB files of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), employees and customers information ( death certificate, passports,credit cards, medical information) A bit of personal files and customers data. |
| Steel Encounters | · Aug 20, 2025 | Steel Encounters is a commercial specialty subcontractor who provides steel joist and metal deck products and services, glazing, curtain wall, and architectural cladding systems to general contractors, architects, and building owners.We are ready to upload more than 21GB files of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), employees and customers information (passports, death/birth certificate, medical information, emails, phones) confidential information and other documents with detailed personal information so on. |
| LandWorks | · Aug 20, 2025 | Landworks landscape & lawn care company. Providing Residential & Commercial services since 1995 to Johnson County & greater KansasCity area.We are ready to upload more than 30GB files of essential corporate documents such as: financial data (audit, payment details, invoices), employees and customers information (Social Security Numbers, phones, medical information) confidential information and other documents with detailed personal information and so on. |
| RAVEN Mechanical | · Aug 20, 2025 | Raven Mechanical is a family owned and operated commercial specialty construction company specializing in plumbing, HVAC, utility and specialty piping projects.We are going to upload company data soon. You will find financialdata (audit, payment details,financial reports, invoices), employees and customers information (passports, driver's licenses, SSCs, birth certificates ) and other confidential information, NDAs and documents with detailed personal information. |
| Advanced Blending Solutions | · Aug 20, 2025 | Advanced Blending Solutions is a leading designer, manufacturer, and supplier of blending and material convey equipment tailored for the plastics industry. We are going to upload about 352gb ( 10gb of SQL databases) of corporate files. You will find detailed employees information (DOB,DL numbers, addresses, SSNs, phones, and so on), HR files, detailed financial and accounting information, lost of agreements and contracts, credit card details, scans of documents with detailed personal information, customer financial and other information, etc. |
| NC Dynamics LLC | · Aug 20, 2025 | NC Dynamics LLC is a full-service manufacturing facility specializing in high-speed machining, including 3, 4, and 5 axis milling,CNC turning, and assembly.We are going to upload about 30gb of corporate files. You will find employees informration (DOB, email addresses, addresses, SSNs,phones, and so on), HR files, detailed financial and accounting information, payment details, lost of agreements and contracts, credit card details, scans of documents with detailed personal information, employee financial information, lots of drawings, NDAs,etc. |
| Bobcat Central | · Aug 19, 2025 | Bobcat Central, Inc. began operations in Stockton in 1976. The company is an equipment dealer offering parts, service, rental, andsales of Bobcat equipment, attachments, Doosan heavy equipment, Tigercat, and Towmaster trailers.We are ready to upload more than 12GB files of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), employees and customers information (driver's license, Social Security Numbers, medical information) confidential information, NDAs and other documents with detailed personal information . |
| Electro-Tech | · Aug 19, 2025 | ElectroTech, Incorporated is a manufacturers representative for electrical products.We are going to upload company data soon. You will find financialdata (audit, payment details,financial reports, invoices), NDAs and other documents with detailed personal information and so on. |
| Rare Editions | · Aug 19, 2025 | Rare Editions has been making dresses for girls for over fifty years. Their line consists of dresses for special occasions, including birthday dresses, christening dresses, and flower girl dresses.We are going to upload company data soon. You will find financialdata , employees and customers information. Lots of projects information with samples of their products and other details. |
| Atlas Transfer & Storage | · Aug 18, 2025 | Atlas Transfer & Storage not only handles residential and commercial relocations, but we also provide premier storage solutions. We are going to upload company data soon. You will find financialdata (audit, payment details,financial reports, financial reports, invoices), employees and customers information: driver's license and a bit of personal files and customers data. |
| Hytrol | · Aug 16, 2025 | Hytrol Conveyor Company, Inc. was founded in 1947. The Company's line of business includes manufacturing conveyors and conveying equipment. The company is headquartered in Jonesboro, ArkansasWe are ready to upload more than 20GB files of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), employees and customers (and even relatives) information (Social Security Card, death certificate, medical information) and other documents with detailed personal information so on. |
| Insero & Co. CPAs, LLP | · Aug 15, 2025 | Insero & Co. CPAs founded in 1973 and headquartered in Rochester,New York, is a premier public accounting firm.We are ready to upload more than 40GB files of essential corporate documents such as: financial data (audit, payment details,financial report, invoices), employees and customers information (passports, emails, driver's license and other documents), confidential information, NDA and so on. |
| Summer results | · Aug 15, 2025 | In summer 2025 our team managed to crack IT defenses of a large number of companies. Data of some of them hasn't been leaked, so we will just list company names. They are: Sweetener Supply, Aurora Air Products, Safti First, The Law Offices of Hicks & Demps, SPEEDLOGISTIK, TOP Ships, Geotec, Sterling Card Solutions, TRS Industries, Microcosm, GWU-Umwelttechnik GmbH. |
| Litchfield Cavo LLP | · Aug 15, 2025 | Litchfield Cavo LLP is a premier coverage and litigation defense law firm founded in 1998 on one principal - client service comes first.We are ready to upload more than 300GB files of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), employees and customers information (driver's license, Social Security Numbers, death certificate, medical information) confidential information, NDAs and other documents with detailed personal information so on. You will also find alot of court documents such as police reports, hearings and so on. |
| FranceLink | · Aug 15, 2025 | Francelink is a company specializing in website creation, hosting, and digital transition support. We are going to upload 20 GB of financial files. |
| Cevital | · Aug 15, 2025 | Founded in 1998 and headquartered in Algiers, Algeria, Cevital isa holding company with interests in food-processing and mass distribution industry to electronics and domestic appliances, the iron and steel industry, the flat glass industry, industrial construction, the automobile industry, services, and the media.We are going to upload company data soon. You will find financialdata (audit, invoices), project details, personal financial details of employees, accounting files. |
| Rusin Law | · Aug 15, 2025 | Rusin Law is a premier civil litigation defense firm specializingin workers' compensation cases. Their services encompass a wide array of legal disciplines, including civil litigation, insurancedefense, employment law, and more.We are ready to upload more than 134GB files of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), employees and customers information (birth certificate,medical information) and other documents containing confidential information. You will also find such documents aspolice protocols, court hearings and other legal confidential docs. |
| Lundberg Design | · Aug 15, 2025 | Lundberg Design specializes in a diverse range of architectural projects including residential, commercial, and public spaces. They offer services that encompass design for restaurants, hotels, retail spaces, and other urban and rural developments.We are ready to upload more than 91GB files of essential corporate documents such as: financial data (audit, payment details,financial reports, invoices), employees and customers information (passports, driver's license) confidential information, NDAs and other documents with detailed personal information so on. |
| Erdy McHenry Architecture | · Aug 15, 2025 | Erdy McHenry Architecture specializes in a diverse range of architectural services, including academic, cultural, agricultural infrastructure, commercial, housing, and health science projects.We are ready to upload more than 26GB files of essential corporate documents such as: financial data (payment details, invoices), employees information. A bit of personal files and customers data. |
| Ranshu, Meridian Auto Parts, Visionaire,Omega enviromenta technologies, Ap Air | · Aug 15, 2025 | We are going to upload about 47 gb of a bunch of companies. All of them are auto parts related. You will find detailed employees information (DOB, DL numbers and so on), HR files, financial and accounting information, lost of agreements and contracts, drawings, specifications, corporate credit card details, scans of documents with detailed personal information, customer data and so on. |
| ZMM | · Aug 15, 2025 | ZMM Architects and Engineers is an award-winning design firm withoffices in West Virginia, Virginia, and Ohio, providing integrated professional services. They specialize in various sectors including education, healthcare, government, and commercial spaces, employing a holistic approach to building design that encompasses architecture, engineering, and sustainable design.We are ready to upload more than 50GB files of essential corporate documents such as: financial data (audit, payment details,financial reports), employees and customers information, confidential informationand other documents with detailed personal informationso on. You will also find such court hearings and other legal confidential docs. |
| MGM Transformer | · Aug 6, 2025 | MGM Transformers specializes in manufacturing a wide range of transformers, including medium voltage dry type, oil-filled, and custom-designed options, serving various sectors such as data centers, renewables, commercial industrial, and utilitiesWe are ready to upload more than 60GB files of essential corporate documents such as: financial data (audits, payment details, financial reports, invoices), employees and customers information (medical information, passports, driver's license, SSNs, DLs and other documents), confidential information, NDA and so on. |
| Meissner Fenstertechnik | · Aug 1, 2025 | Meissner Fenstertechnik creates solutions for building components. Innovative technologies for windows and doors.We are ready to upload 20 GB of corporate documents. A lot of employees personal documents, project details, financials, customersinformation, contracts and agreements, NDAs, etc. |
| Hölscher Holding | · Aug 1, 2025 | Hölscher Holding specializes in consulting, planning, and implementing storage and logistics systems, making it a leading providerin Europe.We are ready to upload 24 GB of corporate documents. Top management and other employees (including foreigners) personal documents,customer information (DOB, address and so on), detailed financials, project data, customers information, contracts and agreementsBMW, Ford, MAN, Mercedes and other big names, NDAs, etc. |
| Herrman Law Firm | · Aug 1, 2025 | Herrman Law LLC, led by attorney Lynnette Herrman, specializes infamily law representation, offering aggressive and client-focused legal services.We are ready to upload more than 168GB files of essential corporate documents such as: financial data (audits, payment details, financial reports, invoices), employees and customers information (credit cards, medical information, passports, SSNs, DLs and otherdocuments), also you will find a lot of court documents such as police reports, hearings and so on. |
| Guyana Sugar | · Aug 1, 2025 | Guyana Sugar Corporation has been hacked. The company was foundedin 1976 and is headquartered in Guyana, provides cultivation of sugar cane and the production of sugar. We will provide the details shortly. |
| Great Lakes Carpet &Tile | · Aug 1, 2025 | Founded in 1991 and headquartered in Wildwood, Florida, Great Lakes Carpet & Tile is a distributor of flooring products offering avariety of brands.We are ready to upload more than 100GB/82794 files of essential corporate documents such as: financial data (audits, payment details,financial reports, invoices), employees and customers information (phones, e-mails, addresses, credit cards, medical information, confidential, passports, SSNs, DLs and other documents), etc. |
| Druni | · Jul 30, 2025 | DRUNI offers a wide range of online beauty products including perfumes, makeup, and cosmetics at competitive prices. We are ready to upload over 40 GB of corporate documents. Employee files like DNI and so on, detailed financials, project data, customers information, contracts and agreements with L'oreal, Dior,Channel and others big names. |
| Hertz Farm Management | · Jul 30, 2025 | Hertz Farm Management specializes in professional farm management, land real estate services, and agricultural appraisals.We are going to upload 9 GB of corporate documents. A huge numberof employee personal files (passports, DLs, birth certs and so on), NDAs, detailed financial data, client information, project information and so on. |
| Mount Vernon Property Management | · Jul 30, 2025 | Mount Vernon Property Management specializes in property management services in Sarasota, offering tailored full-service solutions for landlords and investors. We are going to upload company data soon. You will find inancial data (payment details, financial reports, invoices), A bit of personal files (DLs) and customers data. |
| Blanco Creek Farms | · Jul 30, 2025 | Blanco creek farms is a food & beverages company based out of United States.We are ready to upload more than 24GB of essential corporate documents such as: financial data (audits, payment details, invoices), employees and customers information (phones, e-mails, addresses, passports, SSNs, DLs and other documents), NDA etc. |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .