akira
Known ransomware group ACTIVE Currently active
Akira is a prolific ransomware operation active since March 2023, known for its retro green-on-black leak site and for encrypting both Windows and Linux/ESXi environments. It frequently gains initial access through compromised VPN credentials and unpatched edge devices, and shares code lineage with the defunct Conti group.
15
Total Claims
10
Critical
—
Records Claimed
7
Industries Hit
Active span: Apr 22, 2026 – Nov 11, 2026 · 15 organizations targeted
Currently active
Actor Threat Profile
Activity Timeline
Peak: May 2026 (5)Apr 2026
LessMore
Nov 2026Share this profile
Top Targeted Industries
Healthcare 5
Transportation 3
Financial Services 3
Retail & E-Commerce 1
Education 1
Energy 1
Tradecraft & Infrastructure
0
Documented tools
14 / 36
MITRE tactics / techniques
2
Known leak sites
Targeted Organizations
Claims by akira
Low
Ransomware Claim: Quality Air
Quality Air
akira
Ransomware Transportation
Nov 11, 2026 High
150 GB leaked Ransomware Claim: Ligne Roset
Ligne Roset
akira
Ransomware Retail & E-Commerce
Nov 7, 2026 Critical
130 GB leaked Ransomware Claim: Princeton Management
Princeton Management
akira
Ransomware Financial Services
Nov 2, 2026 Low
Ransomware Claim: Howells Motor Freight
Howells Motor Freight
akira
Ransomware Transportation
Nov 2, 2026 Low
5 GB leaked Ransomware Claim: Service One Transportation
Service One Transportation
akira
Ransomware Transportation
Oct 30, 2026 Critical
112 GB leaked Ransomware Claim: Insurance Services
Insurance Services
akira
Ransomware Financial Services
Oct 28, 2026 Critical
68 GB leaked Ransomware Claim: Trulife
Trulife
akira
Ransomware Healthcare
Oct 28, 2026 High
130 GB leaked Ransomware Claim: Medienwerkstatt
Medienwerkstatt
akira
Ransomware Education
Oct 23, 2026 Critical
Ransomware Claim: Hal Otey Financial
Hal Otey Financial
akira
Ransomware Financial Services
Jun 5, 2026 Critical
Ransomware Claim: Allele Diagnostics
Allele Diagnostics
akira
Ransomware Healthcare
May 14, 2026 Critical
90 GB leaked Ransomware Claim: Greenwoods Dental Centre
Greenwoods Dental Centre
akira
Ransomware Healthcare
May 9, 2026 Critical
48 GB leaked Ransomware Claim: Réseau Radiologique Romand
Réseau Radiologique Romand
akira
Ransomware Healthcare
May 9, 2026 Critical
41 GB leaked Ransomware Claim: Clinical Registry Solutions
Clinical Registry Solutions
akira
Ransomware Healthcare
May 8, 2026 Critical
10 GB leaked Ransomware Claim: SDK Environmental
SDK Environmental
akira
Ransomware Energy
May 8, 2026 Critical
12 GB leaked Ransomware Claim: Kubiak Melton & Associates
Kubiak Melton & Associates
akira
Ransomware Business Services
Apr 23, 2026