ZeroHour

akira

ransomware group · aka Akira, Akira_VP (Linux/VMware ESXi variant), HDK / 'How Daemons Kill' (reported rebrand of its Linux encryptor, 2024) · Unknown; believed to be Russian-speaking. Some researchers have speculated links to former Conti-affiliated operators (unconfirmed). · active since March 2023

Victims · 7d
9▲3 vs prev. week
Victims · 30d
41active targets
Victims · 90d
83
All-time (tracked)
1.5Ksince 2023-04-29
Last post
09-16 17:42UTC
Estimated earnings
Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since.public reporting
Profile · glm-5.3-flash · updated

Akira is a ransomware and data-extortion group first observed in March 2023, known for double extortion and a dedicated leak site used to pressure non-paying victims. It primarily targets small and mid-sized organizations across multiple sectors in North America and Europe, gaining initial access through SSL VPNs and edge appliances (notably Cisco ASA/FTD and SonicWall) often without multi-factor authentication. The group operates both Windows and Linux/VMware ESXi encryptors (Akira_VP) and, per 2025 vendor reporting, has used Windows Safe Mode reboots and attempted EDR tampering to evade defenses. The FBI and CISA estimated roughly $42 million in ransom proceeds as of March 2024 (source: FBI/CISA joint advisory, 2024). The group remains active, with this dashboard tracking five new leak-site victims in the past seven days (last post 2026-09-09).

Tactics & tooling
  • Initial access via SSL VPNs/edge appliances lacking MFA; exploits Cisco ASA/FTD (CVE-2023-20269) and SonicWall SonicOS (CVE-2024-40766); 2025 reporting also links affiliates to SonicWall SSL VPN zero-day exploitation.
  • Double extortion: data exfiltration followed by encryption; leak-site shaming of non-payers.
  • Dual-platform encryptors: Windows locker plus Linux/VMware ESXi variant (Akira_VP).
  • Exfiltration using cloud storage and transfer tools, including MEGA (MEGAsync) and Rclone, per FBI/CISA reporting.
  • EDR evasion: rebooting hosts into Windows Safe Mode to bypass security tooling; at least one affiliate crashed systems while attempting EDR tampering (2025).
  • Reported abuse of Microsoft Intune to push ransomware during deployment (2025 vendor research).
  • Credential-based access: compromised credentials, brute forcing, and purchases from initial access brokers, per FBI/CISA advisory.
  • Post-access reconnaissance with network-scanning utilities (e.g., Advanced IP Scanner) before lateral movement.
Targeted sectors
ManufacturingProfessional/business servicesHealthcareEducationConstructionFinanceIT servicesBroadly targets SMBs and mid-market organizations across critical infrastructure
Notable public victims

Stanford University (claimed October 2023), Nissan Oceania (claimed December 2023), Recent dashboard-tracked leak-site victims (September 2026): Kyodo USA, Brentwood Country Club, CreateASoft, Brent Electric, Stransky Heiz-Mess-Regeltechnik GmbH

Estimated earnings

Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. — FBI/CISA joint cybersecurity advisory AA24-109A (published May 2024), citing ~$42 million in ransom proceeds as of March 2024.

Leak-site victims

VictimDiscoveredDetails
Bulk Handling Systems Companies · Jan 13, 2026BHS serves a diverse clientele, including waste management companies, recyclers, and municipalities, helping them navigate changing material streams and energy recovery challenges.NRT is a leader in plastic bottle and flake sorting technology, boasting the largest installed capacity in PET plastic reclamationplants worldwide.We will upload 24gb of corporate data soon. Detailed employee personal information (addresses, phones, emails, scans of personal documents and so on), projects, client information, lots of internal confidential files, financials, credit cards, NDAs and so on.
Itasca Consulting Group · Jan 13, 2026Itasca is a global engineering consulting and software firm, working primarily with the geomechanics, hydrogeological and microseismics communities.We will upload 20gb of corporate data soon. Detailed employee personal information (addresses, phones, emails, scans of personal documents and so on), projects, client information, internal confidential files, financials, credit cards, NDAs and so on.
Depth · Jan 12, 2026Depth is a computer engineering company that specializes in geographic information systems (GIS).We will upload 260gb of corporate data soon. Employee personal information, projects, confidential files, financials and so on.
The Outdoor Recreation Group · Jan 12, 2026The Outdoor Recreation Group (TORG) is a solutions-driven company, relentless in our drive to meet the needs and exceed the expectations of each and every customer within multiple product categories and industries. We primarily focus on the Camping, Hunting and Fishing markets, with specific specialty in the sewn goods and accessory categories.We will upload corporate data soon. Lots of internal data, partners information, a bit of financial docs, projects, contracts and so on.
Brockhaus · Jan 12, 2026Brockhaus Fertigungstechnik offers custom-designed special-purpose machinery, efficient retrofitting, and complex control technology.We will upload 44gb of corporate data soon. Financials, Lots of internal data, scanned employee documents, client information, projects, drawings and specifications, contracts and agreement, etc.
Syrstone · Jan 12, 2026Syrstone, originally known as the Syracuse Stone Company, is a specialized subcontracting firm with over 50 years of experience inthe site and highway construction industry. The company providestop quality and cost-effective subcontract work including granite curbing, grooving grinding, unit paving, and rumble strips.We will upload 58gb of corporate data soon. Detailed employee personal information (SSN, passports, drivers licenses, credit cards, addresses, phones, emails and so on), financials, client information, NDAs, internal confidential docs and so on.
CSS Services · Jan 12, 2026CsS Services provides end to end eviction management through our service infused technology platform to portfolios throughout the United States.We will upload 45gb of corporate data soon. Employee personal information, customer information, financials, and so on.
Epport Richman & Robbins, Kalamazoo Valley Community College, B&J Transportation, FR Law G · Jan 12, 2026We obtained about 10gb of data of the following companies:Epport, Richman & Robbins, LLP is a Los Angeles-based law firm that specializes in complex commercial and banking litigation across California, as well as sophisticated real estate transactions nationwide.TKH Group, PC is an accounting firm based in Otsego, MI, offeringa wide range of services including tax preparation, financial planning, and business consulting.B&J Transportation specializes in airport transfers, business transfers, and event transportation, ensuring clients remain on schedule and together throughout their journey.FR Law Group PLLC is a law firm based in Phoenix, AZ, that specializes in providing legal services from a business perspective.Red River Glazing is a commercial and residential glass company with offices in Fargo and Bismarck, North Dakota.You will find personal employee personal data, client information, numerous project files, accounting and financials and other internal operational files.
Swavelle Group, Wearbest Sil-Tex Mills · Jan 9, 2026Swavelle Group Fabric Solutions is a diverse textile supplier that offers a wide array of fabrics suitable for various decorating needs.Wearbest Siltex Mills is a family-run textile manufacturer located in Garfield, New Jersey. The firm serves residential clients and furniture manufacturers.We will upload 165gb of corporate data soon. Detailed personal information of every employee (SSN, passport numbers and scans, DL,birth certificates, addresses, phones, emails and so on), clientdocumentation, projects, NDA, so on.
Triple Eight Transport · Jan 9, 2026Triple Eight Transport is an asset-based carrier company offeringservices in reefer, dry and heat van, and more.We will upload almost 30gb of corporate data soon. Detailed personal information of every employee (SSN, passports, visa documents, credit cards, DL, birth certificates, addresses, phones, emailsand so on), financials and payment details, client information, NDA, so on.
McCraw Oil · Jan 9, 2026Founded in 1948, McCraw Oil provides gas, diesel, propane, agricultural chemicals and other products to service stations and customers in Texas and Oklahoma. Bonham, Texas.We will upload 40gb of corporate data soon. We will upload employee documents, lots of projects, specifications and drawings, NDA,client information, contracts and so on.
Morton Buildings · Jan 8, 2026Morton Buildings, headquartered in Morton, Illinois, is a companythat specializes in the designs, builds, and constructs of post-frame buildings, including residential, farm and agriculture, equestrian, commercial, office, and community.We will upload more than 100gb of corporate data soon. Employee documents, projects, specifications and drawings, NDA, partner information, contacts and so on.
These companies havebeen hacked. · Jan 8, 2026We didn't take their data but you can try on your own. If you want details, leave your contacts.Gateway FiberShout! FactoryFilmRiseHuebsch ServicesCrawford Software Consulting
Udall Law Firm · Jan 8, 2026Udall Law Firm is a reputable legal practice serving clients throughout Arizona since 1952, with offices located in Tucson and Phoenix. The firm offers a wide range of legal services, including business law, personal injury, estate planning, and real estate law, among others. It is dedicated to providing customized legal solutions and responsive communication to meet the needs of its clients.We will upload 78gb of corporate data soon. Large amount of clients' personal information (passport numbers, SSNs, drivers licenses, death/birth certs, financials and so on), NDA, police incidents, confidentiality agreements and so on.
Gordon Companies · Jan 8, 2026Gordon Companies Inc. is a family operated & owned business, Gordon Companies include Pool Central, Christmas Central, Daves and Northlight retail stores.We will upload corporate data soon. Employee personal information(passport numbers, SSNs and other scanned documents), client data, financials, NDA and so on.
Labeltex Group · Jan 7, 2026Labeltex Group Srl offers products made with certified raw materials in a continuous process that looks to the future of the textile industry and the planet.We will upload corporate data soon. Financial data, agreements and other internal files.
BUHLMANN GROUP · Jan 7, 2026BUHLMANN GROUP is a premium trading company specializing in steelpipes, pipe fittings, and accessories, serving various industries including energy, chemicals, shipbuilding, and machine construction.We will upload more than 55gb of corporate data soon. Lots of drawings and specifications, confidentiality agreements, employees personal documents, project files, financials, contracts and agreements, customers information and so on.
Wilson Smith CochranDickerson · Jan 7, 2026Wilson Smith Cochran Dickerson is a law firm specializing in trial and appellate litigation, providing advocacy and advice for clients dealing with business and casualty disputes.We will upload 120gb of corporate data soon. We will upload numerous files with personal information of clients, lots of court files, police reports, court hearings and other confidential legal files.
RJS · Jan 7, 2026RJS Corporation is a global supplier of equipment for the tire manufacturing industry, specializing in products such as tension controllers, creel systems, and specialty tire equipment.We will upload corporate data soon. You will find detailed employee information (SSNs, passport numbers, DLs, addresses and so on), financials, agreements with Goddyear, Bridgestone, Nokia, Yokohama, Michelin, Pirelli and so on, NDAs and other files.
KSL Ingenieure · Jan 5, 2026KSL Ingenieure GmbH is a consulting firm based in Herrischried that specializes in various engineering services including buildingenergy consulting, structural engineering, and geotechnical construction.We will upload corporate 17 gb of corporate data soon. Confidential project files, employee scanned documents (DLs, passports and other files), HR files, projects, agreements, detailed financials, customers and partners information and so on.
Purcell Architects · Jan 5, 2026Purcell Everett Architects specializes in providing world-class vision and design coupled with personalized service tailored to each client's specific needs.We will upload corporate more than 30gb of corporate data soon. Employee information, project files, financials, contracts and agreements, customers information and so on.
Gebrüder Bagusat GmbH & Co. KG · Jan 5, 2026Gebrüder Bagusat GmbH & Co. KG is a Food and Beverage Manufacturing, Business Services General, and Business Services company.We will upload corporate 20gb of corporate data soon. Project files, financials, contracts and agreements, customers and partners information and so on.
Posillico · Jan 5, 2026Posillico is dedicated to setting the standard for excellence in the construction industry relative to: infrastructure, quality oflife, and making a difference by using innovation and solid relationships at all levels.We will upload almost 1TB of corporate data and SQLs soon. We took everything: personal information of employees, projects, contracts and agreements, detailed financials, insurance files and so on.
The Lewis Bear · Jan 5, 2026The Lewis Bear Company Established in 1876, as a grocery company,The Lewis Bear Company is the oldest privately held corporation in Florida. In 1995, the grocery division was sold, leaving a focused beer distribution company.We will upload corporate data soon. Employee scanned documents (DLs, passports and other files), HR files, projects, agreements, detailed financials, customer information and so on.
Progressive Laboratories · Dec 26, 2025Progressive Laboratories, Inc. specializes in producing targeted nutritional supplements specifically for healthcare professionals.We will upload corporate data soon. Financials, employees files, projects, contracts and agreements, NDAs and so on.
Ruhrpumpen · Dec 26, 2025Founded in 2000 and headquartered in Tulsa, Oklahoma, Ruhrpumpen Group designs manufactures, and supplies pump and pumping equipment. The Company produces overhung pumps, vertical pumps, hydraulic decoking systems, fire pumps, and other products.We will upload 142gb corporate data soon. SSNs of almost 600 employees and other personal information, detailed financials, projects, contracts and agreements, NDA, numerous project files and so on.
Hintenberger GmbH · Dec 26, 2025Hintenberger GmbH is a traditional master craftsman's business. Their well-coordinated team consists of experienced professionals,from master carpenters, roofers, and plumbers to certified building envelope technicians and certified specialists for flat roof and building waterproofing.We will upload 15gb of corporate data soon. Employees information, detailed accounting, lots of projects, NDA, specifications, andso on.
Agralite Electric Cooperative · Dec 24, 2025Alex Rubbish & Recycling provides residential and commercial garbage, recycling, yard waste, and roll-off container services in Alexandria, MN. The company also manages leftover ash/fines, leachate, and organics recycling for the Pope/Douglas Waste to Energy facility. We will upload 136gb of corporate data soon. Detailed personal employee information (name, dob, and other information), client information, NDA and tons of other files.
Trubee Wealth Advisors · Dec 24, 2025Trubee Wealth Advisors offers a diverse range of investment services tailored for individuals, small businesses, corporations, andphilanthropic organizations. We will upload 165gb of corporate data soon. Clients and employees information (passports, driver licenses, birth and death certs,w9 forms), accounting, financial statements, benefits, financialanalysis, capital and profit, clearing contract analysis, verification of funds letter, compliance, licensing, HR information, outside brokerage, client DB, confidential client information, NDA and so on.
Watertech of America, WorldPoint ECC, Mastermedia, Garrett Leather, Guttenberg Industries. · Dec 24, 2025We obtained more than 12gb of data of the following companies:Watertech of America, Inc. specializes in industrial water treatment services across the Midwest, focusing on boiler water, cooling water, and wastewater treatment. At WorldPoint provides healthcare training services. From curriculum & course materials for American Heart Association (AHA), NAEMT®, AAP, AAOS, and more, to training supplies for CPR & AED training, skill training & simulation, and live rescue. Mastermedia International serves as a trusted voice of faith in the media and entertainment industry, providing pastoral support to the leaders of studios, networks, and production companies. Garrett Leather specializes in high-quality leather products and services, catering to various sectors including automotive, aviation, hospitality, furniture manufacturing, and more.Guttenberg Industries is a full-service custom plastic injection molder, providing high-precision molding and related services globally for almost 50 years. The company specializes in a wide range of capabilities such as in-mold labeling, over-molding, and producing parts of various sizes from small to large.You will find personal employee personal data, client information, numerous project files, accounting and financials and other internal operational files.
Rafael Construction · Dec 24, 2025Rafael Construction is a full-service commercial general contractor based in Las Vegas, Nevada, specializing in commercial development with services including ground-up construction, design-build, construction management, and public works projects.We will upload more than 20gb of corporate data soon. Personal employee files (passports, DL, social security numbers ~100), financials, confidential internal files, client information, NDAs, etc.
Building Trades · Dec 24, 2025The Los Angeles/Orange Counties Building and Construction Trades Council represents 48 local unions and district councils, servinga membership of 160,000 skilled workers. They provide rigorous apprenticeship programs, ensuring that members are well-trained for both private and public-sector projects.We will upload 14gb of corporate data soon. Detailed personal information about employees, clients and their families (scans of passports, DLs, complete forms with full personal information, photos and so on), detailed financials, client information, and so on.
J Grennan & Sons · Dec 24, 2025J Grennan & Sons is a family owned Agri-trading business. They core business is the manufacturing and distribution, at both wholesale and retail level of Animal Feeds, Farm Fertilisers and Agricultural Seeds. The retailing and wholesaling of Agrochemicals, Farm Hardware and Farm Plastics are also integral parts of our business.We are going to upload company data soon. You will find financialdata (audit, payment details,financial reports, invoices), employees and customers information (passports, driver's license ) A bit of personal files and customers data.
Steel Dynamics · Dec 24, 2025Steel Dynamics is a leading manufacturer of steel products and provider of metals recycling services operating in the United States and internationally since 1993. The company produces a comprehensive range of steel products including sheet steel, structural beams, rail products, engineered bars, and specialty steel sections. Steel Dynamics also offers metals recycling services, processing both ferrous and nonferrous scrap metals into reusable forms.We are going to upload their corporate data soon. You will find tons of Accounting files, documents, and audits. Upon obtaining this data, you could gain invaluable insights into their company's financial health and strategic direction making.
Friis & Moltke · Dec 22, 2025Friis & Moltke delivers architecture that serves a diverse clientbase, ensuring their designs meet both the needs of their clients and the community. We will upload 12gb of corporate data soon. Personal documents (cpr numbers (danish SSNs), passports and other docs), financials, projects, specification and drawings, etc.
MAT 4Site Engineers · Dec 19, 2025MAT 4Site specializes in creating optimal building systems tailored to clients' unique needs. They offer a range of services including consulting, project planning, engineering, and project management to support various stages of construction projects.We will upload 90gb of corporate data soon. Personal documents (driver licenses and other docs), financials, customer information,confidential files, numerous project files, etc.
Global Miami JV · Dec 19, 2025Global Miami Joint Venture operates as a franchise organization under the larger Manchu WOK brand. The company operates franchise locations in Miami, Florida, and conducts its business within thenan sector.We will upload corporate data soon. Employees personal documents (passports, DLs and so on), detailed financials, numerous projects, etc.
Susquehanna Glass · Dec 19, 2025Susquehanna Glass is a family-owned and operated business. Today,it flourishes under the leadership of third-generation owner Walt Rowen, the grandson of original partner, Walter Roye.We will upload 35gb of corporate data soon. Detailed personal information of almost 800 people (i-9 forms, scans of passports, DLs, SSNs, drug test ans so on), detailed financials, customer information, etc.
Associated Thermoforming · Dec 18, 2025Associated Thermoforming offers a full range of services. ATI specializes in technically challenging custom thermoforming solutions, including vacuum forming, pressure forming, and twin sheet forming.We will upload 582gb of corporate data soon. Employees personal documents (passports, DLs and so on), financial information, client information, numerous projects, NDAs, confidential files, etc.
Farwest Fabrication · Dec 18, 2025Farwest Fabrication specializes in steel fabrication, offering products such as pipe piling, structural and architectural steel.We will upload 45gb of corporate data soon. Employees information, financials, payment details, client files, NDAs, etc.
Phillips Scales · Dec 18, 2025Phillips Scales Alaska is the largest distributor of commercial and industrial scales in the state, offering a wide range of products including airport, bench, crane, floor, retail, and truck scales.We will upload 10gb of corporate data soon. Employees personal documents (passports, DLs, SSNs and other information), detailed financial information, client information, projects, NDAs, etc.
Morningstar Properties · Dec 18, 2025Morningstar Properties is a vertically integrated real estate developer, owner, and operator specializing in self-storage and marinas. We will upload 44gb of corporate data soon. Employees personal documents (passports, DLs and other information), financials, client information, projects, confidential files, NDAs, etc.
Household & Commercial Products Association · Dec 18, 2025HCPA, or the Household and Commercial Products Association, represents companies that manufacture and sell household and commercial products, advocating for a sound business environment that promotes safety and innovation.We will upload 23gb of corporate data soon. Employees, clients, partners personal documents, financial information, a lot of projects files (many of them are confidential), production information, NDAs, etc.
Adelman & Gettleman · Dec 17, 2025Adelman & Gettleman is a boutique law firm based in Chicago that specializes in commercial insolvency, bankruptcy, and related litigation. With over 40 years of experience, the firm is known for efficiently resolving financial difficulties for its clients through creative and consensus-driven approaches.We will upload 31gb of corporate data soon. Clients and employeesinformation (passports, DLs, SSNs), financials, court files, police reports and other confidential files.
ACME Industrial · Dec 17, 2025ACME Industrial, Inc. offers a wide range of industrial, commercial, and marine repair and mechanical services from their 10,000 square foot facility in Staten Island, New York.We will upload 256gb of corporate data soon. Employees information (passports, DLs, SSNs, birth and death certs, medical information), financials, payment details, client files, NDAs, etc.
Latitude 33 Planning& Engineering · Dec 17, 2025Latitude 33 is a certified Small Business Enterprise that provides planning, engineering, and surveying services across various locations, including San Diego, Los Angeles, Sacramento, and Salt Lake City.We will upload 53gb of corporate data soon. Employees information(passports, DLs, and numerous forms with personal information), detailed financials, payment details, client files, projects, etc.
Denk & Roche Builders · Dec 15, 2025Denk & Roche Builders specializes in the construction of wood-framed and metal structures, providing services from early design concepts to final finishes, including solar applications and mass timber. We will upload 54gb of corporate data soon. Employee information,detailed financials, projects, contracts and agreements, client files, confidential files, etc.
International Standard Valve · Dec 15, 2025International Standard Valve, Inc. specializes in providing a range of ball valves, gate, globe, and check valves tailored for theoil and gas, oil refining, natural gas, power generation, chemical, petrochemical, pulp and paper, and mining industries.We will upload corporate data soon. Employee information (name, DOB and other information), detailed financials, customer information, contracts and agreements, projects, specifications and so on.
RJS Logistics · Dec 12, 2025RJS Logistics is a freight and logistics company specializing in transporting produce and refrigerated freight. RJS Logistics alsoprovides van freight and flatbed freight services.We will upload corporate data soon. Employee information (DLs, w-9, phones, address and so on), detailed financials, a lot of customers files, contracts, NDAs, confidentiality agreements, etc.
Warrior Crane Service · Dec 12, 2025Warrior Crane is a leading provider of specialized crane lifting services, delivering customized solutions to diverse industries. We will upload 22gb of corporate data soon. Employee information (DLs, passports, phones, address and so on), financials, client information, contracts and agreements, confidentiality agreements,etc.

In the newsAll →

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .