akira
ransomware group · aka Akira, Akira_VP (Linux/VMware ESXi variant), HDK / 'How Daemons Kill' (reported rebrand of its Linux encryptor, 2024) · Unknown; believed to be Russian-speaking. Some researchers have speculated links to former Conti-affiliated operators (unconfirmed). · active since March 2023
Victims · 7d
9flat
Victims · 30d
43active targets
Victims · 90d
86
All-time (tracked)
1.5Ksince 2023-04-29
Last post
09-17 17:39UTC
Estimated earnings
Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since.public reporting
Profile · glm-5.3-flash · updated
Akira is a ransomware and data-extortion group first observed in March 2023, known for double extortion and a dedicated leak site used to pressure non-paying victims. It primarily targets small and mid-sized organizations across multiple sectors in North America and Europe, gaining initial access through SSL VPNs and edge appliances (notably Cisco ASA/FTD and SonicWall) often without multi-factor authentication. The group operates both Windows and Linux/VMware ESXi encryptors (Akira_VP) and, per 2025 vendor reporting, has used Windows Safe Mode reboots and attempted EDR tampering to evade defenses. The FBI and CISA estimated roughly $42 million in ransom proceeds as of March 2024 (source: FBI/CISA joint advisory, 2024). The group remains active, with this dashboard tracking five new leak-site victims in the past seven days (last post 2026-09-09).
Tactics & tooling
- Initial access via SSL VPNs/edge appliances lacking MFA; exploits Cisco ASA/FTD (CVE-2023-20269) and SonicWall SonicOS (CVE-2024-40766); 2025 reporting also links affiliates to SonicWall SSL VPN zero-day exploitation.
- Double extortion: data exfiltration followed by encryption; leak-site shaming of non-payers.
- Dual-platform encryptors: Windows locker plus Linux/VMware ESXi variant (Akira_VP).
- Exfiltration using cloud storage and transfer tools, including MEGA (MEGAsync) and Rclone, per FBI/CISA reporting.
- EDR evasion: rebooting hosts into Windows Safe Mode to bypass security tooling; at least one affiliate crashed systems while attempting EDR tampering (2025).
- Reported abuse of Microsoft Intune to push ransomware during deployment (2025 vendor research).
- Credential-based access: compromised credentials, brute forcing, and purchases from initial access brokers, per FBI/CISA advisory.
- Post-access reconnaissance with network-scanning utilities (e.g., Advanced IP Scanner) before lateral movement.
Targeted sectors
ManufacturingProfessional/business servicesHealthcareEducationConstructionFinanceIT servicesBroadly targets SMBs and mid-market organizations across critical infrastructure
Notable public victims
Stanford University (claimed October 2023), Nissan Oceania (claimed December 2023), Recent dashboard-tracked leak-site victims (September 2026): Kyodo USA, Brentwood Country Club, CreateASoft, Brent Electric, Stransky Heiz-Mess-Regeltechnik GmbH
Estimated earnings
Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. — FBI/CISA joint cybersecurity advisory AA24-109A (published May 2024), citing ~$42 million in ransom proceeds as of March 2024.
Leak-site victims1,494 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Daniels & Taylor, P.C | · May 8, 2025 | Daniels & Taylor, P.C. is a full-service law firm in Lawrenceville that has been serving clients thorough Gwinnett CountyWe are going to upload more than 70GB of essential corporate documents such as: a lot of detailed client personal information and documents (passports, medical records, drivers licenses), confidential court files, financial data of clients, NDAs, etc. |
| Marsicovetere & Levine Law Group | · May 8, 2025 | Marsicovetere & Levine Law Group, P.C. investigates and defends serious felony and misdemeanor criminal allegations, DUI/DWI, and motor vehicle-related cases.We are ready to upload 20 GB of corporate documents such as: a lot of legal cases with detailed personal data of customers, medical records, detailed police reports, arrest warrants, numerous confidential documents, etc. |
| Insight Pipe Contracting | · May 8, 2025 | Insight Pipe Contracting is a leading provider of trenchless maintenance and rehabilitation services for wastewater, stormwater, and other underground utilities.We are ready to upload 7 GB of corporate documents such as: personal files of employees, client data, projects info, financial data (audits, tax statements, payment details, reports, lots of invoices), corporate NDAs, agreements, confidential internal documents, etc. |
| Watkins Steel | · May 8, 2025 | Watkins Steel has been delivering quality metal work products andservices to clients in the building and construction industry.We are ready to upload 17 GB of corporate documents such as: personal files of employees, client data, projects info, financial data (audits, tax statements, payment details, reports), corporate NDAs, etc. |
| Southwood Financial,SWF FUNDING LLC, EduCap Inc. | · May 8, 2025 | Southwood Financial specializes in private student loan solutionsand debt settlement services aimed at helping borrowers achieve financial stability. SWF FUNDING LLC and EduCap Inc. have also been impacted and lost their data.We are going to to upload more than 370 GB of data of these companies. In the archives you will find the following: personal information of employees and borrowers (SSNs, passports and so on), financial data (audits, payment details, reports), a lot of corporate NDAs, confidentiality agreements, etc. |
| Kramer Green Zuckerman Greene and Buchsbaum | · May 8, 2025 | Kramer, Green, Zuckerman, Greene & Buchsbaum, PA is a law firm inHollywood, FL, specializing in asset protection, estate planning, corporate legal matters, and business transactions. We are going to upload more than 80 GB of essential corporate documents such as: personal docs of employees and clients (lots of),client financial data (audits, payment details, reports), corporate NDA’s, court hearings records and other numerous confidentialdocuments. |
| Tolerance Masters | · May 8, 2025 | Tolerance Masters company manufactures impellers and wheels in custom configurations to meet the exact requirements of their client specifications.We are going to upload 18 GB of essential corporate documents such as: personal information employees, a bit of customers information, financial data (audits, payment details, reports), corporateNDA’s, confidentiality agreements etc. |
| DYNAMIS Insurance | · May 8, 2025 | DYNAMIS Insurance is a Greek insurance company that offers a widerange of insurance products with solid backing and the confidence of personal contact.We are ready to upload 25 GB of essential corporate documents such as: personal information of employees, information of clients, financial data (audits, payment details, reports, credit card details), corporate NDA’s, lots of contracts and agreements etc. |
| J. SCHNEEBERGER Maschinen AG | · May 8, 2025 | J. SCHNEEBERGER Maschinen AG develops and produces the most modern CNC grinding machines for the manufacturing and re-grinding of cutting tools and the production of a variety of precision parts.We are going to upload more than 30 GB of corporate documents such as: passports and identity cards of employees, financial data (audits, payment details, reports), corporate NDA’s and confidentiality agreements, etc. |
| Santa Cruz Properties | · May 8, 2025 | Santa Cruz Properties company emphasizes exceptional service and personal guidance, ensuring clients navigate the buying and selling process smoothly.We are ready to upload 15 GB of essential corporate documents such as: personal information of employees, some information about customers, financial data (audits, payment details, reports), numerous contracts, corporate NDA’s, etc. |
| Cohn Lifland Pearlman Herrmann and Knopf | · May 8, 2025 | These respected guys didn't seem to have much respect for their clients, as a huge amount of personal information was almost unprotected. We took 110 GB of files where a lot of client informationcan be found: passports, driver's licenses, birth/death certificates, correspondence, addresses, contacts and more. There is alsoa lot of data about the firm in the form of financial statementsand other documents, and many of them are confidential. The mostinteresting thing about this case is that these guys didn't wantto pay even with an active cyber insurance policy. We will upload the files shortly. |
| Dress To | · May 8, 2025 | Dress To is a women's clothing brand.We are going to to upload more than 34 GB of essential corporate documents such as: employees and customers personal files (identity cars, passports and so on), financial data (audits, payment details, reports), corporate agreements, etc. |
| Rayle Electric Membership Corporation | · Apr 23, 2025 | Rayle Electric Membership Corporation is a member-owned electric cooperative which provides electrical power to the rural areas ofall or parts of ten northeast Georgia counties.We are ready to upload more than 30GB of essential corporate documents such as: personal information of employees, financial data (audits, payment details, reports), corporate NDA’s, confidentialtrial documents, etc. |
| Diedrich Coffee | · Apr 22, 2025 | Diedrich Coffee specializes in sourcing, roasting and selling theworld's highest quality coffees. The company markets its three leading brands of specialty coffees, Diedrich Coffee, Coffee People and Gloria Jeans Coffees, through office coffee service distributors, restaurants, and specialty retailers, and via the company's web stores. We are ready to upload more than 15 GB of corporate documents such as: various files of employees and customers, financial data (audits, payment details, reports), corporate NDA’s, confidential contracts, etc. |
| MASHBURN CONSTRUCTION | · Apr 22, 2025 | Mashburn Construction is a full-service construction company providing construction management, design-build, preconstruction and general contracting services. We are ready to upload more than 162 GB of essential corporate documents such as: personal documents of employees, financial data (audits, payment details, reports), projects, a lot of confidential agreements, corporate NDA’s, etc. |
| The law firm of Rochelle McCullough, L.L.P | · Apr 22, 2025 | The law firm of Rochelle McCullough, L.L.P. primarily focuses itspractice on: matters involving corporate bankruptcy and individuals with substantial business-related obligations; assistance andcounsel to financially distressed business entities and individuals with significant business-related responsibilities; commercial and individual Chapter 11 reorganizations and creditor rights.We are ready to upload 21 GB of essential corporate documents such as: personal information of employees and customers, financial data of the firm and its clients (audits, payment details, reports), confidential agreements, trial documents, corporate NDA’s, etc. |
| Bindi SpA | · Apr 22, 2025 | Bindi SpA is headquartered in Italy. The Company's line of business includes the manufacturing of concrete products from a combination of cement and aggregate.We are ready to upload 30 GB of corporate documents such as: contact numbers and e-mail addresses of customers, financial data (audits, payment details, reports), corporate NDA’s, employee docs, etc. |
| TrussWorks International | · Apr 22, 2025 | TWI can engineer, design, fabricate, machine, paint, and pre-assemble all aspects of your project in house, which gives us complete control over quality, schedule, and budget. We are ready to upload more than 13 GB of essential corporate documents such as: contact numbers and e-mail addresses of employeesand customers, SSNs, phones, addresses, driver's licenses and soon. You will also find their and their clients financial data (audits, payment details, reports), corporate NDA’s, etc. |
| Agencia Browne y Espinoza | · Apr 22, 2025 | Agencia Browne y Espinoza is an accounting company based out of 812 Huérfanos, Santiago, Chile.We are ready to upload more than 37 GB of essential corporate documents such as: a lot of clients financial data (audits, payment details, reports), corporate NDA’s, confidential personal details, etc. |
| Heinz Hammer Vertragswerkstatt (Mercedes-Benz car dealer) | · Apr 22, 2025 | Heinz Hammer Vertragswerkstatt offers customized mobility and service packages and have access to a nationwide pool of new, used Mercedes-Benz vehicles.We are ready to upload more than 40 GB of essential corporate documents such as: contact numbers and e-mail addresses of customers, employee files, financial data (payment details, reports, lots of invoices), contracts containing personal data, etc. |
| Hubbard, McIlwain, &Brakefield, P.C. | · Apr 22, 2025 | Hubbard, McIlwain, & Brakefield, P.C. is one of the most well-respected and successful firms in Alabama.We are ready to upload more than 4 GB of data. Not much but interesting: trial documents, a lot of client data such as financials,personal docs, etc. |
| Tänzer GmbH | · Apr 22, 2025 | Tänzer GmbH offers their customers an ever-growing range of repair services since 1990.We are ready to upload more than 13 GB of corporate documents such as: information about employees and customers, a bit of personal files, financial data, projects data,etc. |
| Toppan Next | · Apr 22, 2025 | TOPPAN NEXT empowers businesses with the confidence to safeguard high-risk digital and physical information & products. But fails ...We are ready to upload more than 12GB of essential corporate documents such as: personal information of employees, customers data,financial data (audits, payment details, reports, credit cards details), contracts and agreements, corporate NDA’s, etc. |
| Hayward Quartz Technology | · Apr 22, 2025 | Hayward Quartz Technology started in Hayward California with a simple goal of supporting quartz fabricators with high quality machined quartz products. We are ready to upload more than 50 GB of corporate documents such as: employee details, financial data, corporate NDA, etc. |
| Lamberti Group | · Apr 22, 2025 | The Lamberti Group produces chemical specialties for a broad range of applications.We are ready to upload essential corporate documents such as: detailed financial information, employee personal information, projects, customers data, corporate NDA’s, etc. |
| Dale Partners Architects | · Apr 18, 2025 | Dale | Bailey, an Association is a joint venture of Bailey Architecture Education, P.A.and Dale Partners Architects P.A. The association was formed in August 2008 to create a firm with unsurpassed experience in educational facility planning, design and construction.We are ready to upload over 148 GB of essential corporate documents such as: contact numbers and e-mail addresses of employees andpartners, employee personal files, detailed financial data (audits, payment details, reports), corporate NDA’s, etc. |
| Anfarm Hellas | · Apr 18, 2025 | ANFARM is a manufacturer of generic pharmaceutical formulations for human use. The company sells its products to 31 countries and acts as third party manufacturer to 45 clients.We are ready to upload more than 35 GB of essential corporate documents such as: contact numbers and e-mail addresses of governments(!) of a few countries like Portugal, Spain and a few others (if somebody is interested), detailed financial data (audits, payment details, reports), corporate NDA’s, employee personal information, clients data, etc. |
| D'Granel | · Apr 18, 2025 | D'Granel is a transportation company that offers logistics, fleetmanagement, and cargo transportation services.We are ready to upload more than 40 GB of essential corporate documents such as: financial data (audits, payment details, reports), lots of confidential documents, corporate NDA’s, contact numbers and e-mail addresses of employees and customers etc. |
| Heierli | · Apr 18, 2025 | The company's activities include project planning, construction management, expertise and consulting in civil engineering and its specialized fields.We are ready to upload more than 92 GB of essential corporate documents such as: contact numbers and e-mail addresses of employeesand customers, financial data (audits, payment details, reports), corporate NDA’s, etc. |
| Bolivar Insulation | · Apr 18, 2025 | Bolivar Insulation serves all of southwest Missouri including theareas of Springfield, Bolivar, Branson, Joplin, Columbia and Camdenton, Missouri for gutter cleaning, repair or new gutter installation.We are ready to upload more than 9 GB of essential corporate documents such as: financial data (audits, payment details, reports),contact numbers and e-mail addresses of employees and customers,SSN’s, driver licenses, passport scans, etc. |
| King Industries Inc. | · Apr 18, 2025 | King Industries, Inc. designs, manufactures, and distributes additives for small to large companies throughout the world who make their own branded products we all know and use like engine oils, greases, hydraulic oils, paints, coatings, and rubber goods.We are ready to upload more than 260 GB of essential corporate documents such as: corporate NDA’s, passport scans, medical documents, contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), etc. |
| PEÑA BRIONES MCDANIEL & CO. | · Apr 18, 2025 | PEÑA BRIONES MCDANIEL & CO. offers a wide range of accounting, tax, assurance, and consulting services across Texas and New Mexico. Their clientele includes individuals, non-profits, governments,financial institutions, and businesses from various industries. We are ready to upload more than 34 GB of essential corporate documents such as: marriage licenses, corporate licenses, agreementsand contracts, personal passport scans, driver licenses, contactnumbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), etc. |
| Inductors Inc. | · Apr 18, 2025 | Inductors Inc. is the premier franchised distributor of inductivecomponents specializing in power and RF products. We are ready to upload more than 6 GB of essential corporate documents such as: corporate NDA’s, corporate licenses, agreements and contracts, financial data (audits, payment details, reports), insurance documents, etc. |
| Caputo | · Apr 18, 2025 | The firm assists businesses in small business accounting, tax preparation, strategic business planning, part-time Chief Financial Officer Services, and assistance in loan proposal preparation to banks among others.We are ready to upload more than 20 GB of essential corporate documents such as: corporate NDA’s, personal SSN’s, internal corporate correspondence, contact numbers and e-mail addresses of employees and customers, driver licenses, corporate licenses, agreements and contracts, financial data (audits, payment details, reports), etc. |
| Agricola Da Quinta De Corona | · Apr 18, 2025 | Companhia Agricola da Quinta de Corona has its headquarters in Lisbon. Its main activity is forestry.We are ready to upload more than 38 GB of essential corporate documents such as: contact numbers and e-mail addresses of employeesand customers, corporate licenses, agreements and contracts, employee passports, etc. |
| STUMPF MÜLLER Biberach | · Apr 18, 2025 | The company rents and leases tools and equipment in the areas of sanitation, heating, control and control technology.We are ready to upload some of essential corporate documents suchas: contact numbers and e-mail addresses of employees and customers, corporate licenses, agreements and contracts, etc. |
| Oklahoma Steel & Wire | · Apr 18, 2025 | Oklahoma Steel & Wire Co Inc. offers a complete line in both agricultural and industrial wire products.We are ready to upload more than 129 GB of essential corporate documents such as: corporate licenses, agreements and contracts, contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), etc. |
| Batesville Products,Inc. | · Apr 11, 2025 | BPI is a full-service, custom aluminum casting supplier headquartered in Lawrenceburg, IN.We are ready to upload more than 7 GB of essential corporate documents such as: contact numbers and e-mail addresses of employees and customers, corporate NDA’s, financial data (audits, payment details, reports), corporate licenses, agreements and contracts, personal SSN’s, etc. |
| SeproTec Multilingual Solutions | · Apr 11, 2025 | Seprotec offers top-notch translation, localization and interpretation services for every business unit or functional area in 220 languages. In addition, they offer intellectual property management services to reduce complexity and cost in IP Management. We are ready to upload a lot of essential corporate documents such as: corporate NDA’s, personal SSN’s, corporate licenses, agreements and contracts, medical documents and certificates, financialdata (audits, payment details, reports), contact numbers and e-mail addresses of employees and customers, etc. |
| Dumont Telephone | · Apr 9, 2025 | Dumont Telephone is a proven leader in technology and a proud supporter of regional economic development. We give our customers small-town service with products that rival big-time tech companies, including broadband internet, streaming video, telephone, and business services.We are ready to upload more than 6 GB of essential corporate documents such as: financial data (audits, payment details, reports),insurance documents, corporate licenses, agreements and contracts, personal SSN’s, etc. |
| Simms Sigal Linwood Inc. | · Apr 9, 2025 | Representing brands from all reaches of the world Simms Sigal Linwood Inc. is one of the leading and most trusted importers and distributors in the indusrty.We are ready to upload a lot of essential corporate documents such as: contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), etc. |
| Hotell Euroopa | · Apr 9, 2025 | Hestia Hotel Group OU is an enterprise located in Estonia, with the main office in Tallinn. It operates in the All Other Business Support Services industry.We are ready to upload more than 12 GB of essential corporate documents such as: contact numbers and e-mail addresses of employeesand customers, corporate licenses, agreements and contracts, financial data (audits, payment details, reports), etc. |
| Bauer-Walser AG | · Apr 9, 2025 | Bauer Walser AG is a leading company in the precious metals industry with a 100-year history of success.We are ready to upload more than 50 GB of essential corporate documents such as: corporate NDA’s, contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), corporate licenses, agreements and contracts, etc. |
| The Fullerton Hotelsand Resorts | · Apr 9, 2025 | The Fullerton Hotels and Resorts owns and operates four properties in the Asia-Pacific, with three award-winning hotels in the prime Central Business District locations of Singapore and Sydney, as well as a luxury oceanfront resort in Hong Kong.We are ready to upload more than 148 GB of essential corporate documents such as: NDA’s and corporate licenses, agreements and contracts, driver licenses, passports and other employee and customer documents, financial data (audits, payment details, reports), etc. |
| TIME Group | · Apr 7, 2025 | TIME develops and installs BMS, an ERP system and with both high-level technological and application features, to meet the market needs of Italian SMEs in production and business process management/monitoring.We are ready to upload a lot of essential corporate documents such as: financial data (audits, payment details, reports), employeeHR documents, contact numbers and e-mail addresses of employees and customers, etc. |
| ASOLO DOLCE SAS | · Apr 7, 2025 | Asolo Dolce Spa operates within the Production of rusks and biscuits; production of preserved pastry products industry. It was incorporated in 2006. Its headquarters are located at Via Enrico Fermi 51 Asolo Veneto 31011.We are ready to upload more than 17 GB of essential corporate documents such as: contact numbers and e-mail addresses of employeesand customers, financial data (audits, payment details, reports), etc. |
| SMYK | · Apr 7, 2025 | SMYK stores offer a wide selection of clothing and footwear, toys, baby accessories and other products for children aged 0-14. TheSMYK chain’s advantage is the availability of a multitude of products of various categories for children aged 0-14 “under one roof”.We are ready to upload more than 28 GB of essential corporate documents such as: corporate NDA’s, corporate licenses, agreements and contracts, financial data (audits, payment details, reports), contact numbers and e-mail addresses of employees and customers, etc. |
| Plaza Brasília Hotéis | · Apr 6, 2025 | The Brasília Palace Hotel was the first building inaugurated in Brasília when it opened its doors in 1958. It was the first large hotel in the city, with 13,000 square meters and the capacity to accommodate up to 350 people. We are ready to upload more than 250 GB of essential corporate documents such as: personal passports and other employee and customer documents, contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), corporate licenses, agreements and contracts, etc. |
| AAYLEX ONE S.A. | · Apr 6, 2025 | At Cocorico, we aim to raise the most natural, healthiest and best tasting chicken.We are ready to upload more than 19 GB of essential corporate documents such as: corporate licenses, agreements and contracts (including corporate NDA’s), contact numbers and e-mail addresses of employees and customers, employees medical documents, etc. |
| DELOPT | · Apr 6, 2025 | DELOPT is a world-class Company in the area of Defence Electronics & Electro-Optics and solutions for Retail market with In-Store Technology.We are ready to upload more than 70 GB of essential corporate documents such as: corporate NDA’s, contact numbers and e-mail addresses of employees and customers, corporate licenses, agreements and contracts, financial data (audits, payment details, reports), passports and other employee and customer documents, etc. |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .