akira
ransomware group · aka Akira, Akira_VP (Linux/VMware ESXi variant), HDK / 'How Daemons Kill' (reported rebrand of its Linux encryptor, 2024) · Unknown; believed to be Russian-speaking. Some researchers have speculated links to former Conti-affiliated operators (unconfirmed). · active since March 2023
Victims · 7d
9flat
Victims · 30d
43active targets
Victims · 90d
86
All-time (tracked)
1.5Ksince 2023-04-29
Last post
09-17 17:39UTC
Estimated earnings
Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since.public reporting
Profile · glm-5.3-flash · updated
Akira is a ransomware and data-extortion group first observed in March 2023, known for double extortion and a dedicated leak site used to pressure non-paying victims. It primarily targets small and mid-sized organizations across multiple sectors in North America and Europe, gaining initial access through SSL VPNs and edge appliances (notably Cisco ASA/FTD and SonicWall) often without multi-factor authentication. The group operates both Windows and Linux/VMware ESXi encryptors (Akira_VP) and, per 2025 vendor reporting, has used Windows Safe Mode reboots and attempted EDR tampering to evade defenses. The FBI and CISA estimated roughly $42 million in ransom proceeds as of March 2024 (source: FBI/CISA joint advisory, 2024). The group remains active, with this dashboard tracking five new leak-site victims in the past seven days (last post 2026-09-09).
Tactics & tooling
- Initial access via SSL VPNs/edge appliances lacking MFA; exploits Cisco ASA/FTD (CVE-2023-20269) and SonicWall SonicOS (CVE-2024-40766); 2025 reporting also links affiliates to SonicWall SSL VPN zero-day exploitation.
- Double extortion: data exfiltration followed by encryption; leak-site shaming of non-payers.
- Dual-platform encryptors: Windows locker plus Linux/VMware ESXi variant (Akira_VP).
- Exfiltration using cloud storage and transfer tools, including MEGA (MEGAsync) and Rclone, per FBI/CISA reporting.
- EDR evasion: rebooting hosts into Windows Safe Mode to bypass security tooling; at least one affiliate crashed systems while attempting EDR tampering (2025).
- Reported abuse of Microsoft Intune to push ransomware during deployment (2025 vendor research).
- Credential-based access: compromised credentials, brute forcing, and purchases from initial access brokers, per FBI/CISA advisory.
- Post-access reconnaissance with network-scanning utilities (e.g., Advanced IP Scanner) before lateral movement.
Targeted sectors
ManufacturingProfessional/business servicesHealthcareEducationConstructionFinanceIT servicesBroadly targets SMBs and mid-market organizations across critical infrastructure
Notable public victims
Stanford University (claimed October 2023), Nissan Oceania (claimed December 2023), Recent dashboard-tracked leak-site victims (September 2026): Kyodo USA, Brentwood Country Club, CreateASoft, Brent Electric, Stransky Heiz-Mess-Regeltechnik GmbH
Estimated earnings
Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. — FBI/CISA joint cybersecurity advisory AA24-109A (published May 2024), citing ~$42 million in ransom proceeds as of March 2024.
Leak-site victims1,494 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Sweeney Design | · Jun 24, 2025 | Sweeney is an always open and transparent residential design-build remodeling firm that caters to homeowner professionals in Dane County, specifically Madison, Stoughton, Fitchburg, Maple Bluff, McFarland, Middleton, Monona, Oregon, Shorewood Hills, Sun Prairie, Verona, and Waunakee.We are going to upload about 200(!)MB of corporate data. Just a few financial files. |
| HYBRO Saatzucht GmbH& Co KG | · Jun 17, 2025 | HYBRO Saatzucht GmbH & Co KG is one of the leading seed breeding companies in the breeding of hybrid and population rye in Germanyand Europe.We are going to upload another 3GB of corporate data of another client. In the archive there are tons of project documents with client information. Contracts, agreements, financials and so on. |
| Tufton Capital Management | · Jun 16, 2025 | Tufton Capital Management is an independently owned wealth management and investment advisory firm serving high net worth individuals, families and institutions.We are going to upload about 3GB of corporate data. Numerous docswith client personal information as DOB, phone, address, emails are inside. Employee passports, driver licenses and other information can be found as well. Contracts, agreements and so on. |
| Cutcliffe Archetto &Santilli | · Jun 16, 2025 | Cutcliffe Archetto & Santilli is a prominent law firm based in Providence, RI, offering a range of comprehensive legal services. We are going to upload about 4GB of essential corporate data. Youwill find a lot of documents with client personal information asDOB, DOD, SSNs, phone, address, emails, credit cards, medical reports and so on. |
| Ab Ovo | · Jun 16, 2025 | Ab Ovo is an innovative and independent business & software solutions provider.We are going to upload about 72GB of corporate data. 72Gb of SQLswill be uploaded soon. You will find there client information and lots of other internal docs. |
| Sweeney | · Jun 14, 2025 | Sweeney is an always open and transparent residential design-build remodeling firm that caters to homeowner professionals in Dane County, specifically Madison, Stoughton, Fitchburg, Maple Bluff, McFarland, Middleton, Monona, Oregon, Shorewood Hills, Sun Prairie, Verona, and Waunakee.We are going to upload about 200(!)GB of corporate data. Just a few financial files. |
| Dyrham Park | · Jun 14, 2025 | Dyrham Park Country Club is a private members golf and country club in Barnet.We are going to upload about 38GB of corporate data. Lots of documents with client (and family members) personal information (DOB,Emails address, address, phone, driver license), financial data,contracts and agreements, NDAs, etc. |
| Patron Insurance Services | · Jun 14, 2025 | Patron Insurance Services has been serving its clients’ needs throughout the Metropolitan Washington D.C. area including Maryland,Virginia, and Washington D.C. since 1984.We are going to upload about 7 GB of corporate data. Lots of documents with client personal information (DOB, Emails address, address, phones, driver licenses), detailed financial data, contractsand agreements, NDAs, etc. |
| Professional TestingCorporation (PTC) | · Jun 14, 2025 | Professional Testing Corporation (PTC) is an established global leader in testing and assessment services.We are going to upload about 5 GB of corporate data. Employee personal documents, medical records, confidentiality agreements, contracts, client information, detailed financial data, project data. |
| NyN | · Jun 11, 2025 | NyN is a real estate developer in Barcelona and provinces.We are going to upload about 30 GB of corporate data. Lots of financial data of almost all of their hotels and other divisions, internal correspondence, a bit of personal files of employees, lotsof contracts and agreements, clients data, NDAs, etc. |
| Homeyer Consulting Services, Inc | · Jun 11, 2025 | Homeyer Consulting Services, Inc. is a global water consulting firm. We have a multimillion dollar laboratory dedicated to testingtreated water, and a structured team of field consultants who consult to over 6,800 sites worldwide.We are going to upload about 169 GB of corporate data. There are a lot of employee personal documents (passport scans of each employee), lots of confidential contracts, agreements correspondence,detailed financial data (audits, payment details, reports), clients data, NDAs, etc. |
| Farmacisti Più Rinaldi S.p.A. | · Jun 11, 2025 | Farmacisti Più Rinaldi S.p.A. disctributes homeopathic products, herbal products, veterinary products, phytotherapeutic products, chemical substances and substances of plant origin including those of non-pharmaceutical use, medical and surgical devices, biocides, medical devices, sanitary and hygienic items.We are going to upload about 15 GB of corporate data. There are alot of employee personal documents, lots of contracts and agreements, detailed financial data (audits, payment details, reports),clients data, NDAs, etc. |
| HBI Canada | · Jun 11, 2025 | HBI Sells smoking accessories to thousands of stores, distributors, jobbers and cash & carry outlets nationwide.We are going to upload about 16 GB of corporate data. There are alot of employee personal documents, lots of contracts and agreements, customers data, financial data (audits, payment details, reports), NDAs, Minecraft posters, etc. |
| Sturdevant's Auto Parts | · Jun 11, 2025 | Sturdevant's Auto parts is the regions largest automotive parts &accessory business with 40 locally owned stores in SD, ND, Iowa, Minnesota & Nebraska.We are going to upload about 16 GB of corporate data. Personal documents, lots of contracts and agreements, client data, financialdata (audits, payment details, reports), etc. |
| AMS Paving | · Jun 11, 2025 | AMS Paving, Inc. has been providing quality paving and maintenance services throughout Southern California since 1981.We are going to upload about 17 GB of corporate data. Employee personal information (DLs, DOB, addresses, credit card details and so on), lots of contracts and agreements, client data, financial data, accounting and financial data, payment details, etc. |
| RECYCLA | · Jun 11, 2025 | RECYCLA provides a waste treatment, disposal and recovery servicefor companies in the industrial and artisan sectors based on theprinciples of the circular economy.We are going to upload about 160 GB of corporate data. A lot of detailed employee personal information (DOB, addresses, credit card details and so on), client data, financial data, contracts and agreements, NDAs, etc. |
| DALB | · Jun 11, 2025 | DALB a global leader amongst the decorative and functional plastics manufacturing companies.We are going to upload about 25 GB of corporate data. Employee personal information (DLs, DOB, addresses, SSNs and so on), financial data, contracts and agreements, client data, NDAs, etc. |
| North American Lighting | · Jun 11, 2025 | North American Lighting manufactures automotive lighting products. The company offers turn signal, clearance, fog, rear, center high-mounted stop, and license plate lamps.We are going to upload about 22 GB of corporate data. Employee personal information, financial data (audits, payment details, reports, invoices), contracts and agreements, etc. |
| Dynamic Engineering | · Jun 11, 2025 | Dynamic Engineering provides best maintained production machine shop equipment available. We are going to upload about 7 GB of corporate data. Employee (and relatives) personal information, financial data, projects info,client data, contracts and agreements, NDAs, etc. |
| Observer Media Group | · Jun 11, 2025 | Observer Media Group Inc. is a multimedia company with seven newspapers, four websites, four quarterly lifestyle magazines and 100employees serving multiple communities around Florida.We are going to upload about 8 GB of corporate data. A lot of filled out forms with personal data and credit card details, employee personal information, financial data, client data, contracts and agreements, etc. |
| Sleepy Hollow Country Club | · Jun 11, 2025 | Sleepy Hollow Country Club is a private country club located in Scarborough, New York.We are going to upload about 14 GB of corporate data. Confidential agreements, a lot of employee personal information (DOB, passports, social security cards, addresses, phones, emails, and so on), detailed financial data, a bit of client data, contracts and agreements, NDAs, etc. |
| McKenzie Commercial Contractors | · Jun 11, 2025 | McKenzie Commercial delivers high-quality, cost-effective commercial construction services, while fostering a supportive work environment for employees who provide exceptional workmanship.We are going to upload about 42 GB of corporate data. Employee personal information (DOB, passports, addresses, phones, emails, and so on), financial data, client data, lots of project data, contracts and agreements, confidential documents, NDAs, etc. |
| AGME Automated assembly solutions | · Jun 11, 2025 | AGME Automated Assembly Solutions design and manufacture special purpose machines that best meet the automatic assembly needs of different industries.We are going to upload about 10 GB of corporate data. Lot of employee personal information (DOB, passport id, addresses, phones, emails, and so on), projects info, financial data, client data, contracts and agreements, confidential documents, NDAs, etc. |
| Termignoni SpA | · Jun 11, 2025 | Termignoni SpA designs and creates motorbike exhaust systems for use at the highest levels.We are going to upload about 1,5 GB of corporate data. Lot of personal information (DOB, address, phones, emails, and so on), financial data, client data, contracts and agreements, NDAs, etc. |
| Del Corona & Scardigli Canada | · Jun 11, 2025 | Del Corona & Scardigli Canada provides a variety of logistics services for all your import, export and triangular shipments: air, sea and land transport, warehousing and distribution, etc. We are going to upload about 15 GB of corporate data. Employee information (DOB, address, phones and so on), financial data (audits, payment details, reports), lots of client data, correspondence, contracts and agreements, NDAs, etc. |
| High Grade Materials | · Jun 11, 2025 | High Grade Materials is a Michigan-based company specializing in concrete and concrete-related products.We are going to upload about 20 GB of corporate data. A lot of employee information (DOB, passport number, address, phone and so on), detailed financial data (audits, payment details, reports, invoices), contracts and agreements, death/birth certificates, NDAs, etc. |
| Flagship Bank | · Jun 11, 2025 | Flagship Bank was founded by a local Board of Directors, owned bycommitted local shareholders and operated by successful, local bankers with deep roots in our community.We are going to upload about 40 GB of corporate data. A lot of client information (DOB, SSN, passport number, address, DLs, phone and so on), detailed financial data, contracts and agreements, certificates, etc. |
| TOP Ships Inc., Stock Symbol TOPS | · Jun 11, 2025 | TOP Ships is an international owner and operator of modern, fuel-efficient "ECO" tanker vessels currently focusing on the transportation of crude oil and petroleum productsWe are going to upload about 65 GB of corporate data. Lots of documents with detailed employee personal information, detailed financial data, contracts, certificates, etc. |
| Brackett & Ellis | · Jun 11, 2025 | Brackett & Ellis provides legal advice for private businesses of all sizes, governmental entities and non-profit organizations. We are going to upload about 40 GB of corporate data. Lots of client information, financial data and payment details, contracts, employee personal documents, etc. |
| Laboratorios Belloch(Nelly, Yunsey, Fresh feel) | · Jun 11, 2025 | The company creates personal care products and cosmetics. We are going to upload about 25 GB of corporate data. Lots of projects files, detailed financial data, information about all clients, contracts, correspondence, a bit of employee personal documents, and a lot of other data of such brands as Nelly, Yunsey and Fresh feel cosmetics. |
| Ghent Dredging | · Jun 11, 2025 | Ghent Dredging has made itself a name as a contractor in dredgingand marine works.We are going to upload about 16 GB of corporate data. Detailed financial data, client information, a bit of employee personal documents, etc. |
| Delignit | · Jun 11, 2025 | Delignit AG develop, manufacture and sell ecological materials and system solutions from renewable natural resources. We are going to upload about 24 GB of corporate data. Employee personal documents, numerous contracts and agreements, confidentialclient information (including Mercedes Benz files), detailed financial data, etc. |
| Bronx Pro Group | · Jun 11, 2025 | Bronx Pro Group is a neighborhood-based firm that employs approximately 100 professional and support staff engaged in real estate development, construction, property management, and residential services.We are going to upload about 269 GB of corporate data. Numerous employee personal documents (SSNs, passports, driver licenses, addresses medical documents), contracts and agreements, client information, detailed financial data, etc. |
| JDC Air & Sea Freight (HEUEL LOGISTICS Group) | · May 21, 2025 | The JDC Air & Sea Freight is part of the HEUEL LOGISTICS Group. As an international freight forwarder, the company has its focus on air and sea cargo, as well as contract logistics.We are going to upload about 20 GB of corporate data. Employee personal information, lots of agreements and contracts, client information, detailed financial data. |
| Rommel's Ac\Rommel Electric\Rommel Harley - Davidson | · May 20, 2025 | Rommel's Ace is part of Rommel Holdings, Inc., a mid-sized holding company located in Fruitland, MD. Rommel Holdings has owned andoperated a variety of businesses dating back to the 1950's.We are going to upload about 2 GB of corporate data. This is not much but there is so much personal information of almost every employee including terminated ones. Passport numbers, addresses, personal emails, SSNs, medical records and is on. You will also find a lot of accounting and projects files of Rommel Electric and Rommel Harley - Davidson companies. |
| MSM International (TOYOMI) | · May 20, 2025 | TOYOMI was established in the year 1992 as a professional marketing unit of MSM Metal Industries Sdn Bhd (MSM) to provide sheet metal forming services to the manufacturing and engineering sector both in Malaysia and internationally. We are going to upload more than 6 GB of corporate documents suchas: employee personal documents, lot of detailed accounting files of their partners, projects files. |
| Making Tech Happen | · May 20, 2025 | Making Tech Happen is a software solutions provider based in Santa Rosa, CA.We are going to upload more than 8 GB of corporate documents suchas: employee personal documents (passports, driver licenses, SSNs), accounting files, lots of projects files, etc. A diary recordof one of employees as a bonus. |
| BEST VISION | · May 20, 2025 | Best Vision Immobiliare is a global real estate partner offering a diverse selection of properties across 19 regions. The company is committed to delivering exceptional service in every transaction, making each experience extraordinary for its clients.We are going to upload more than 24 GB of essential corporate documents such as: employee and client personal documents (passports, driver licenses, confidentiality agreements), projects data, NDAs etc. |
| Williams Patent Crusher & Pulverizer Co. | · May 19, 2025 | Williams Patent Crusher & Pulverizer Co. offers a vast product line including Roller Mills, Pulverizers, Hammer Mills, Primary & Secondary Crushers, Impact Dryer Mills, Impact Crushers, Refuse Shredders, Shear Shredders, Nife Hogs, Nife Granulators, Wood Hogs,Chippers, Apron Pan Feeders, Feeder Breakers, Air Classifiers, Single & Double Roll Crushers, and so much more.We are going to upload more than 33 GB of essential corporate documents such as: employees personal emails, passport, driver license, SSNs, personal emails and home addresses, confidentiality agreements, projects data, etc. |
| Mantis Creative. Formerly known as WCI Rally. | · May 19, 2025 | Mantis Creative. Visualization and creative solutions for real estate projects and tomorrow's emerging brands. Mantis is a leadingarch-viz & creative agency in north america, transforming ideas into high-performing brands built to conquer their environments.We are going to upload more than 45 GB of corporate documents such as: contracts, client data, projects, some financial data, etc. |
| Av Alumitran | · May 17, 2025 | AV Alumitran is an established company with more than 40 years ofexperience in aluminium extrusion.We are going to upload more than 80GB of corporate data. A lot ofproject data (descriptions, drawings and so on), agreements, very detailed financial data (audits, payment details, reports, invoices), etc. |
| Murphy Pearson Bradley & Feeney | · May 17, 2025 | Murphy Pearson Bradley & Feeney is an accomplished law firm specializing in trial practice, litigation and business counseling.We are going to upload more than 182 GB of essential corporate data. A lot of detailed employees and clients personal information (birth/death certificates, passport, DLs and so on), NDAs, confidentiality agreements, confidential court records, financial data,etc. |
| Franman | · May 17, 2025 | Franman provides a wide range of services to the shipping industry, focused on shipbuilding equipment, spare parts, ship repairs, service, consulting and security services.We are going to upload more than 15 GB of corporate data (10gb SQLs). A lot of employees personal information, NDAs, confidentiality agreements, financial data, lots of projects details. |
| Pacific Summit Energy, Sumitomo Corporation affiliate | · May 17, 2025 | As an affiliate of Sumitomo Corporation, Pacific Summit Energy offers global resources and local experts in natural gas, power, crude oil, and LNG.We are going to upload more than 163GB of corporate data. Detailed employee personal information (passports, driver licenses, credit card details and so on), numerous Sumitomo Corporation internal files, financial data (audits, reports, invoices), client data,confidential agreements, project information, lots of NDAs, etc. |
| Vezina Lawrence & Piscitelli | · May 17, 2025 | Vezina, Lawrence & Piscitelli, P.A. provides legal services on behalf of contractors, concessionaires and other public-private partnership parties, design firms, sureties, and owners.We are going to upload more than 80GB of corporate data. Numerouscourt records, confidential settlement agreements, employee personal documents, lots of documents with client data, financials, NDA, etc. |
| Superior Steel | · May 17, 2025 | Superior Steel is experienced in all manners of contracting arrangements including competitive bid, negotiated contract, design build and fast track projects.We are going to upload more than 6 GB of corporate documents. Employees passports, DLs, NDAs, confidentiality agreements, financial data of clients, projects, documents containing personal information, etc. |
| Precision Tax Relief | · May 17, 2025 | Precision Tax Relief is an established tax debt resolution firm, owned and operated by licensed, experienced and top-performing tax professionals. We are going to upload more than 123GB of essential corporate documents. Passports, DLs, confidentiality agreements, financial data of clients, lots documents containing personal information, etc. |
| Bervar and Jones | · May 17, 2025 | Ward D. Jones has practiced law in Hawaii for 30 years and handled trials in state courts on all of the islands, Hawaii federal court, as well as Hawaii arbitrations.We are going to upload more than 102GB of essential corporate documents. You will find a lot of client information (medical records, drivers licenses, passports, birth\death certificates), court confidential files, financial data of clients, NDAs, etc. |
| Klampfer Elektroanlagen | · May 17, 2025 | G. Klampfer Elektroanlagen GmbH is a company specializing on building services as well as general contractor activities based in Austria.We are going to upload more than 20GB of corporate documents. Lots of detailed employee information (medical records, drivers licenses), projects information, financial data of clients, NDAs, etc. |
| Selenis (Evertis is also involved) | · May 17, 2025 | Selenis is part of the IMG Group, a family-owned multinational with presence in the polymers industry since 1959. Selenis is a premium supplier of innovative copolyesters for a diverse range of applications. We are going to upload more than 70GB of essential corporate documents such as: a lot of detailed client personal information and documents (passports, medical records, drivers licenses), confidential court files, financial data of clients, NDAs, etc. |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .