akira
ransomware group · aka Akira, Akira_VP (Linux/VMware ESXi variant), HDK / 'How Daemons Kill' (reported rebrand of its Linux encryptor, 2024) · Unknown; believed to be Russian-speaking. Some researchers have speculated links to former Conti-affiliated operators (unconfirmed). · active since March 2023
Victims · 7d
9flat
Victims · 30d
43active targets
Victims · 90d
86
All-time (tracked)
1.5Ksince 2023-04-29
Last post
09-17 17:39UTC
Estimated earnings
Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since.public reporting
Profile · glm-5.3-flash · updated
Akira is a ransomware and data-extortion group first observed in March 2023, known for double extortion and a dedicated leak site used to pressure non-paying victims. It primarily targets small and mid-sized organizations across multiple sectors in North America and Europe, gaining initial access through SSL VPNs and edge appliances (notably Cisco ASA/FTD and SonicWall) often without multi-factor authentication. The group operates both Windows and Linux/VMware ESXi encryptors (Akira_VP) and, per 2025 vendor reporting, has used Windows Safe Mode reboots and attempted EDR tampering to evade defenses. The FBI and CISA estimated roughly $42 million in ransom proceeds as of March 2024 (source: FBI/CISA joint advisory, 2024). The group remains active, with this dashboard tracking five new leak-site victims in the past seven days (last post 2026-09-09).
Tactics & tooling
- Initial access via SSL VPNs/edge appliances lacking MFA; exploits Cisco ASA/FTD (CVE-2023-20269) and SonicWall SonicOS (CVE-2024-40766); 2025 reporting also links affiliates to SonicWall SSL VPN zero-day exploitation.
- Double extortion: data exfiltration followed by encryption; leak-site shaming of non-payers.
- Dual-platform encryptors: Windows locker plus Linux/VMware ESXi variant (Akira_VP).
- Exfiltration using cloud storage and transfer tools, including MEGA (MEGAsync) and Rclone, per FBI/CISA reporting.
- EDR evasion: rebooting hosts into Windows Safe Mode to bypass security tooling; at least one affiliate crashed systems while attempting EDR tampering (2025).
- Reported abuse of Microsoft Intune to push ransomware during deployment (2025 vendor research).
- Credential-based access: compromised credentials, brute forcing, and purchases from initial access brokers, per FBI/CISA advisory.
- Post-access reconnaissance with network-scanning utilities (e.g., Advanced IP Scanner) before lateral movement.
Targeted sectors
ManufacturingProfessional/business servicesHealthcareEducationConstructionFinanceIT servicesBroadly targets SMBs and mid-market organizations across critical infrastructure
Notable public victims
Stanford University (claimed October 2023), Nissan Oceania (claimed December 2023), Recent dashboard-tracked leak-site victims (September 2026): Kyodo USA, Brentwood Country Club, CreateASoft, Brent Electric, Stransky Heiz-Mess-Regeltechnik GmbH
Estimated earnings
Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. — FBI/CISA joint cybersecurity advisory AA24-109A (published May 2024), citing ~$42 million in ransom proceeds as of March 2024.
Leak-site victims1,494 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Best Telecom Laos | · Mar 12, 2025 | Sky Telecom State Company, established on the 11th of June 2011, is 100 percent government owned and under direct supervision of Ministry of Defense.We are ready to upload a lot of essential corporate documents such as: contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), customers logins and passwords, addresses and date of birth, etc. |
| CNQC | · Mar 12, 2025 | CNQC was established in 1952, which mainly engaged in domestic and international construction projects and investment, real estatedevelopment, capital management, logistics, design consulting and etc.We are ready to upload more than 90 GB of essential corporate documents such as: driver licenses, employees medical forms, financial data (audits, payment details, reports), rental agreements, contact numbers and e-mail addresses of employees and customers, employments passport with fingerprints, etc. |
| Peerless Food Equipment | · Mar 12, 2025 | Peerless Food Equipment is a food equipment company dedicated to creating value for the world’s leading wholesale bakeries and commercial food processors by developing and applying innovative technology for excellent solutions. We are ready to upload more than 200 GB of essential corporate documents such as: financial data (audits, payment details, reports), corporate NDA’s, contact numbers and e-mail addresses of employees and customers, confidential licenses, agreements and contracts, passport scans, etc. |
| Helmut Hölbling Spedition GmbH | · Mar 12, 2025 | Helmut Hölbling Spedition GmbH is a full-service provider for transport and provide their customers with the best possible supportin all their needs.We are ready to upload a lot of essential corporate documents such as: contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), etc. |
| Taking stock of February 2025 | · Mar 11, 2025 | Our team was able to breach the IT defenses of a huge number of companies. Among them are:graphicworld.nl | goredevelopments.com | lotransportes.com | electroconnectinc.com | solomon.com.tw | granjero-feliz.com | ljengineering.comEveryone who agreed to cooperate with us did not appear on this list. The data of the others have been made publicly available or disclosed here.We always act honestly and try not to disclose the fact of data leakage until the very last moment. Therefore, it is in your best interest not to be on this list and contact us immediately. |
| WAUGH & GOODWIN, LLP | · Mar 11, 2025 | Waugh & Goodwin, LLP is a local CPA firm in Colorado Springs providing audit, tax and consulting services.We are ready to upload more than 120 GB of essential corporate documents such as: internal correspondences, contact numbers and e-mail addresses of employees and customers, personal driver licenses, passports and other employee and customer documents, employeeSSN’s, etc. |
| Veristat | · Mar 11, 2025 | Veristat is the science-first full-service drug and biologic CRO and consultancy that integrates strategic planning, regulatory expertise, and clinical trial execution to rapidly advance the mostcomplex or novel therapies. We are ready to upload more than 63 GB of essential corporate documents such as: HR documents, contact numbers and e-mail addresses of employees and customers, medicare documents, customer medical documents, confidential licenses, agreements and contracts, financial data (audits, payment details, reports), etc. |
| All4Labels - Global Packaging Group | · Mar 11, 2025 | All4Labels, headquartered in Hamburg, is one of the world’s top label manufacturers and the leading provider of digital printing solutions with a specialization on the home and personal care as well as food & beverage markets. We are ready to upload more than 192 GB of essential corporate documents such as: financial data (audits, payment details, reports), contact numbers and e-mail addresses of employees and customers, etc. |
| Princeton Hydro | · Mar 11, 2025 | Princeton Hydro has provided unparalleled consulting services in the assessment, management, and restoration of our planet's important water, wetland, and soil resources.We are ready to upload more than 324 GB of essential corporate documents such as: contact numbers and e-mail addresses of employees and customers, passports and other employee and customer documents, financial data (audits, payment details, reports), internal correspondence, etc. |
| Callico Distributors, Inc. | · Mar 10, 2025 | Callico is New England's independent redistributor of janitorial,food service & industrial products.We are ready to upload more than 32 GB of essential corporate documents such as: confidential licenses, agreements and contracts, financial data (audits, payment details, reports), internal correspondences, etc. |
| Pacific Honda Company | · Mar 10, 2025 | Pacific Honda is proud to serve Oahu drivers with incredible Honda sales, service and financing. Whether you're hoping to lease a new Honda, buy a pre-owned car or discuss auto financing, we're your one-stop car-buying shop.We are ready to upload more than 13 GB of essential corporate documents such as: personal SSN’s, confidential licenses, agreementsand contracts, contact numbers and e-mail addresses of employeesand customers, financial data (audits, payment details, reports), passports and other employee and customer documents, etc. |
| Arcusin | · Mar 10, 2025 | Arcusin develop and manufacture specialized bale handling equipment to increase efficiency and cost savings for farmers around theworld.We are ready to upload more than 55 GB of essential corporate documents such as: corporate NDA’s, confidential licenses, agreements and contracts, internal correspondence, passports and other employee and customer documents, etc. |
| Safe-Strap Company, LLC | · Mar 10, 2025 | Safe-Strap Company, LLC mission is to provide our valued clients with the most innovative products and the highest quality of service to make shopping safe and convenient just as we have since wewere founded three decades ago.We are ready to upload more than 10 GB of essential corporate documents such as: corporative NDA’s, contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), confidential licenses, agreements and contracts, etc. |
| Fickling & Company | · Mar 10, 2025 | Fickling & Company is a regional real estate services and development firm headquartered in Macon, GA.We are ready to upload more than 70 GB of essential corporate documents such as: corporate NDA’s, personal SSN’s. credit cards with CVV numbers, confidential licenses, agreements and contracts, passport scans, health care certificates, contact numbers and e-mail addresses of employees and customers, etc. |
| GPS 909 | · Mar 10, 2025 | Grupo de Protección y Seguridad 909 is the pioneer company specialized in all types of protection and surveillance systems on the island of Ibiza. They have a qualified multidisciplinary team whose top priority is the excellence of the services it provides.We are ready to upload a lot of essential corporate documents such as: contact numbers and e-mail addresses of employees and customers, personal NIF numbers, financial data (audits, payment details, reports), internal correspondences, etc. |
| Swift Haulage Berhad | · Mar 7, 2025 | Swift Haulage Berhad is Malaysia’s fastest growing fully integrated logistics provider; consistently ranked as the top haulier in all major ports in Peninsular Malaysia in terms of twenty-foot equivalent unit (TEU) volume. We are ready to upload more than 84 GB of essential corporate documents and financial company information. |
| Sittab INC | · Mar 7, 2025 | The company is a world leader in the field of seating environment. The business idea is to develop and sell seat accessories in standard or customized versions. We are ready to upload a lot of essential corporate documents such as: NDA’s, employee medical documents, SSN’s, contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), corporate licenses, agreements and contracts, etc. |
| RFA Decor | · Mar 6, 2025 | Reshaping spaces globally for homes, business & retail clients with diverse offerings & customized solutions since 1979.We are ready to upload a lot of essential corporate documents such as: driver licenses, confidential licenses, agreements and contracts, internal correspondences, contact numbers and e-mail addresses of employees and customers, etc. |
| Adrenalina | · Mar 5, 2025 | Adrenalina is a manufacturer and retailer of professional and quality clothing for athletes and sports enthusiasts.We are ready to upload 10 GB of essential corporate documents. |
| Cyncly Company | · Mar 5, 2025 | 2020, a Cyncly company, provides software, services and content to help professional designers, retailers and manufacturers bring ideas to life, inspire innovation and streamline processes.We are ready to upload more than 32 GB of essential corporate documents such as: contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), HR documents, etc. |
| City Plumbing & Electric Supply Co | · Mar 5, 2025 | North Georgia's largest wholesale distributor or plumbing & electrical products.We are ready to upload more than 77 GB of essential corporate documents such as: contact numbers and e-mail addresses of employeesand customers, financial data (audits, payment details, reports), confidential licenses, agreements and contracts, etc. |
| FANTIN group | · Mar 4, 2025 | Falegnameria Fantin specializes in the production of interior andexterior wooden doors and windows, complements and furnishings according to design.We are ready to upload more than 14 GB of essential corporate documents such as: contact numbers and e-mail addresses of employeesand customers, financial data (audits, payment details, reports), confidential licenses, agreements and contracts, passports and other employee and customer documents, etc. |
| Ray Fogg Corporate Properties | · Mar 4, 2025 | Ray Fogg Corporate Properties has a vast portfolio of flexible office, warehouse, industrial and office / warehouse (Flex) properties available for lease.We are ready to upload more than 75 GB of essential corporate documents such as: financial data (audits, payment details, reports), confidential licenses, agreements and contracts, contact numbers and e-mail addresses of employees and customers, etc. |
| Sunnking SustainableSolutions | · Mar 4, 2025 | Sunnking offers a comprehensive suite of IT Asset Disposition (ITAD) services, prioritizing efficiency and sustainability.We are ready to upload a lot of essential corporate documents such as: NDA’s, financial data (audits, payment details, reports), confidential licenses, agreements and contracts, contact numbers and e-mail addresses of employees and customers, etc |
| Forstenlechner Installationstechnik | · Mar 4, 2025 | The Perger family company FORSTENLECHNER lives for excellence in building technology and mechanical engineering. And offers the best technology.We are ready to upload more than 41 GB of essential corporate documents such as: contact numbers and e-mail addresses of employeesand customers, HR documents, SVNr, financial data (audits, payment details, reports), confidential licenses, agreements and contracts, etc. |
| Meta E2 F | · Feb 27, 2025 | Meta E2 F provides a wide range of highly skilled, state-of-the-art manufacturing and development capabilities for the production of electrical, electronic and cable products.We are ready to upload more than 9 GB of essential corporate documents such as: financial data (audits, payment details, reports),contact numbers and e-mail addresses of employees and customers,etc. |
| Praxis Eins | · Feb 27, 2025 | Praxis Eins is a state-funded network of practices designed to secure and modernize health care in Germany. Praxis Eins aims to create a reliable network of health care facilities, especially in low-income areas.We are ready to upload more than 10 GB of essential corporate documents such as: passports and other employee and customer documents, financial data (audits, payment details, reports), financial data (audits, payment details, reports), polygraph data, etc. |
| Mercury Paper Inc | · Feb 27, 2025 | Mercury Paper is a rapidly growing manufacturer of bath tissue and paper towels. It provides contract manufacturing to Oasis Brands for FIORA®, one of the fastest growing brands in the U.S. We are ready to upload more than 100 GB of essential corporate documents such as: financial data (audits, payment details, reports), contact numbers and e-mail addresses of employees and customers, confidential licenses, agreements and contracts, etc. |
| Sterling BMW | · Feb 27, 2025 | Sterling BMW offers Orange County, CA, the best vehicles available. BMWs are known for high performance, true luxury, and industryleading design. Sterling BMW is proud to be a leading BMW dealerfor Orange County, and all of California.We are ready to upload more than 10 GB of essential corporate documents such as: financial data (audits, payment details, reports), contact numbers and e-mail addresses of employees and customers, confidential licenses, agreements and contracts, etc. |
| Autohaus Kießling | · Feb 27, 2025 | Autohaus Kießling in Zwickau is your competent partner for everything to do with new cars, used cars, maintenance and repairs. We are an official partner of Volkswagen and Audi in Saxony.We are ready to upload a lot of essential corporate documents such as: contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), passports and other employee and customer documents, etc. |
| Chimu Agropecuaria S.A. | · Feb 26, 2025 | Chimú Agropecuaria, leader in the production and commercialization of poultry, contributes to the well-being of humanity, supplying food for mass consumption in the global market.We are ready to upload more than 14 GB of essential corporate documents such as: financial data (audits, payment details, reports), contact numbers and e-mail addresses of employees and customers, etc. |
| Merkanti Bank Ltd | · Feb 25, 2025 | Merkanti Bank Ltd (formerly MFC Merchant Bank Ltd) is a credit institution licensed by the Malta Financial Services Authority (Registration No: C31608) and is focused primarily on merchant banking services, factoring and general corporate banking services. We are ready to upload a lot of essential corporate documents such as: financial data (audits, payment details, reports) and many internal databases. |
| MNJ Technologies Direct | · Feb 25, 2025 | MNJ Technologies serves its midmarket-to-enterprise customers by helping them increase productivity and reduce costs through personalized IT solutions and services. We are ready to upload a lot of essential corporate documents such as: NDA’s, confidential licenses, agreements and contracts, medicare documents, financial data (audits, payment details, reports), SSN’s, contact numbers and e-mail addresses of employees and customers, etc. |
| January 2025 results | · Feb 25, 2025 | In the first month of this year, our team managed to crack the ITdefenses of a large number of companies. Among them:hmkc.com.au | hersrudsofbellefourche.com | ptsmail.co.uk | simcointeriors.com | ptcalliance.com | infordata.net | cerved.comWe always act honestly and try not to disclose the fact of data leakage until the very last moment. Therefore, it is in your best interest to stay off this list and contact us immediately. |
| Navien, Inc. | · Feb 24, 2025 | The #1 brand in high-efficiency condensing tankless water heaters, combination boilers and wall-mounted boilers. Official ENERGY STAR® Partner. Navien products are available in the U.S. and Canada through a select network of wholesale distributors. We are ready to upload more than 61 GB of essential corporate documents such as: contact numbers and e-mail addresses of employeesand customers, financial data (audits, payment details, reports), NDA’s, etc. |
| Advantage Home Construction Insurance | · Feb 24, 2025 | Advantage Home Construction Insurance (AHCI) provides warranties and construction insurance, operating nationally with offices in St. Helens, Huddersfield, London, Birmingham, Belfast and Horsham, offering construction-related insurance and services designed to provide clients with peace of mind.We are ready to upload more than 110 GB od essential corporate documents such as: insurance documents, confidential licenses, agreements and contracts, passports and other employee and customer documents, internal correspondence, financial data (audits, payment details, reports), contact numbers and e-mail addresses of employees and customers, etc. |
| Cronos Europa | · Feb 24, 2025 | Cronos Europa is an IT and digital communications company uniquely dedicated to serving the European institutions, agencies and bodies.We are ready to upload more than 88 GB of essential corporate documents such as: confidential licenses, agreements and contracts, contact numbers and e-mail addresses of employees and customers, etc. |
| Thornton EngineeringAustralia Pty Ltd | · Feb 24, 2025 | Thornton Engineering provides design and fabrication of structural steel, pressure vessels, heat exchangers, plate and piling steel products for major projects Australia wide. We are ready to upload more than 11 GB of essential corporate documents such as: contact numbers and e-mail addresses of employeesand customers, financial data (audits, payment details, reports), etc. |
| Luminus Management | · Feb 22, 2025 | Luminus Management is an investment management firm founded in 2002 with offices in New York, NY and Houston, TX. The firm focuseson a low net, long/short, relative value oriented strategy that invests opportunistically across the capital structure of companies.We are ready to upload a lot of essentials corporate documents such as: NDA’s, driver licenses, passports, financial data (audits,payment details, reports), employee medical documents, etc. |
| Insyst GmbH | · Feb 22, 2025 | InSyst GmbH is an owner-managed IT service company in Velbert/NRW. Across all sectors - from architectural offices to craft businessesWe are ready to upload a lot of essential corporate documents such as: NDA’s, contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), confidential licenses, agreements and contracts, etc. |
| Paratus | · Feb 21, 2025 | Paratus is Africa’s quality network. With an eye on the future, the group is investing in infrastructure and establishing itself as a key player in delivering integrated network services across Africa.We are ready to upload more than 84 GB of essentials corporate documents such as: NDA’s, driver licenses, passports, birth certificates, contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), etc. |
| Barhite & Holzinger Inc. | · Feb 21, 2025 | Licensed Real Estate Brokers and Property Management in Westchester County for over 85 years. We are ready to upload more than 65 GB of essential corporate documents such as: contact numbers and e-mail addresses of employeesand customers, SSN’s, confidential licenses, agreements and contracts, etc. |
| Nebraska Irrigation | · Feb 20, 2025 | Supplier and manufacturer of center pivot components to dealers domestically and internationally.We are ready to upload a lot of essential corporative documents such as: NDA’s, driver licenses, financial data (audits, payment details, reports), contact numbers and e-mail addresses of employees and customers, etc. |
| Mac Jee | · Feb 20, 2025 | Mac Jee operates in the defense and aerospace segment. It currently comprises Mac Jee Defense, which is responsible for the development, production and marketing of defense systems; Mac Jee Tecnologia, which specializes in improving or creating energy products; and Equipaer, which is responsible for creating products and services for the aviation segment.We are ready to upload more than 16 GB of very essential corporate documents such as: NDA’s, contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports) and as a dessert some rockets technical documentations. |
| Minaris Medical America | · Feb 20, 2025 | Minaris Medical America, formally known as MAST Immunosystems Inc(1979-1996) and Hitachi Chemical Diagnostics (1996-2021) was thefirst company to introduce a multiplex in vitro diagnostic test for allergies and one of the first to introduce a chemiluminescent assay system for the detection of lgE antibodies. We are ready to upload a lot of sensitive corporate documents such as: contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), confidential licenses, agreements and contracts, etc. |
| Berg Engineering Consultants, Ltd. | · Feb 20, 2025 | Berg Engineering Consultants, Ltd. is a consulting engineering company that provides Heating, Ventilating, Air-Conditioning, Electrical, Plumbing and Fire Protection engineering and design services for Hospitals, Schools, Offices and Industrial Buildings.We are ready to upload more than 30 GB of essential corporate documents such as: confidential licenses, agreements and contracts, contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), etc. |
| Ondunova | · Feb 19, 2025 | Grup Ondunova is one of the leading corrugated cardboard packaging manufacturing groups in Catalonia and is formed by the companies Ondunova and Wondu, with their respective production centers inSanta Margarida i Els Monjos, Barcelona. We are ready to upload more than 31 GB of essential corporate documents such as: NDA’s, financial data (audits, payment details, reports), internal correspondence, contact numbers and e-mail addresses of employees and customers, etc. |
| Südkabel GmbH | · Feb 19, 2025 | Südkabel in Mannheim develops, produces and supplies underground cables for medium, high and extra-high voltage as well as the corresponding accessories for energy transmission and distribution customers.We are ready to upload more than 27 GB of essential corporate documents such as: many NDA’s, financial data (audits, payment details, reports), contact numbers and e-mail addresses of employees and customers, etc. |
| Vector Engineering, Inc | · Feb 19, 2025 | Vector Engineering, Inc is a company that operates in engineeringand environmental consulting for mining, mineral processing, waste management.We are ready to upload more than 10 GB of sensitive corporate documents such as: confidential licenses, agreements and contracts, financial data (audits, payment details, reports), contact numbers and e-mail addresses of employees and customers, marriage certificates, etc. |
| Hall Law Group LLP | · Feb 19, 2025 | Hall Law Group LLP has been offering probate planning, estate administration, tax, business and family office services for over 25years.We are ready to upload more than 55 GB of essential corporate documents such as: SSN’s, driver licenses, contact numbers and e-mail addresses of employees and customers, passports (including those of famous individuals) and other employee and customer documents, financial data (audits, payment details, reports), medicare documents, etc. |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .