Privacy Unpacked

Ransomware gang

Akira

Claims on its leak site since 26 April 2023, number 3 of all gangs in the last 12 months

Claims, 12 months
606
Last 30 days
34
All claims
1,655
Last claim
28 October 2026

ransomware.live lists it as descended from Conti.

050100Nov 24: 88 claimsDec 24: 54 claimsJan 25: 75 claimsFeb 25: 84 claimsMar 25: 63 claimsApr 25: 68 claimsMay 25: 38 claimsJun 25: 37 claimsJul 25: 43 claimsAug 25: 59 claimsSept 25: 54 claimsOct 25: 71 claimsNov 25: 87 claimsDec 25: 71 claimsJan 26: 58 claimsFeb 26: 47 claimsMar 26: 75 claimsApr 26: 49 claimsMay 26: 43 claimsJun 26: 32 claimsJul 26: 22 claimsAug 26: 31 claimsSept 26: 36 claimsOct 26: 32 claims so farNov 24Jan 25Jan 26
Akira’s claims per month, last 2 years. The last bar is the month so far.

Where its claimed victims are

  • United States88353%
  • Canada835%
  • Germany755%
  • United Kingdom453%
  • Italy352%
  • Switzerland272%
  • Brazil221%
  • Spain221%

Sectors

  • Manufacturing45527%
  • Professional Services38123%
  • Technology15910%
  • Retail & E-Commerce1217%
  • Financial Services1056%
  • Agriculture and Food Production956%
  • Transportation775%
  • Healthcare594%

Claims matched to an official notice

35 organisations Akira claimed also filed a breach notice with a regulator, all of them after the claim (a median of 86 days later). Matched by name: the notice does not say who the attacker was.

  1. Chisholm, Persson & Ball, P.C.
    Claimed 7 July 2026 · notice filed with the Vermont Attorney General 26 October 2026
  2. McKeever Varga & Senko
    Claimed 20 July 2026 · notice filed with the Indiana Attorney General 21 September 2026
  3. Cardinal Services LLC
    Claimed 19 November 2025 · notice filed with the Texas Attorney General 11 September 2026
  4. Basic Grain Products Inc
    Claimed 6 August 2026 · notice filed with the Indiana Attorney General 10 September 2026
  5. Gale Credit Union
    Claimed 31 August 2026 · notice filed with the Indiana Attorney General 3 September 2026
  6. DeMera DeMera Cameron, LLP
    Claimed 13 April 2026 · notice filed with the California Attorney General 1 September 2026
  7. Berg Lilly P.C.
    Claimed 18 June 2026 · notice filed with the Indiana Attorney General 28 August 2026
  8. Cascade Coffee, LLC
    Claimed 20 August 2026 · notice filed with the Washington Attorney General 26 August 2026
  9. Spray Equipment & Service Center LLC
    Claimed 9 June 2026 · notice filed with the Indiana Attorney General 24 August 2026
  10. Punch & Associates Investment Management Inc
    Claimed 5 May 2026 · notice filed with the Indiana Attorney General 24 August 2026
  11. National Standard Parts Associates Inc
    Claimed 4 June 2026 · notice filed with the Indiana Attorney General 21 August 2026
  12. Williams Brothers Construction Co., Inc.
    Claimed 16 February 2026 · notice filed with the Indiana Attorney General 19 August 2026
  13. Tange, Mann & Garza, P.C.
    Claimed 1 April 2026 · notice filed with the Texas Attorney General 14 August 2026
  14. Paylogix, LLC
    Claimed 15 January 2026 · notice filed with the California Attorney General 14 August 2026
  15. Rodenburg Law Firm
    Claimed 9 December 2025 · notice filed with the California Attorney General 2 July 2026
  16. Clinical Registry Solutions
    Claimed 6 May 2026 · notice filed with the California Attorney General 11 June 2026
  17. Texollini, Inc.
    Claimed 18 March 2026 · notice filed with the California Attorney General 29 May 2026
  18. Alliance Roofing Company, Inc.
    Claimed 1 April 2026 · notice filed with the California Attorney General 7 May 2026
  19. Wakefield & Associates, LLC
    Claimed 11 February 2025 · notice filed with the California Attorney General 30 January 2026
  20. FirstFruits Farms, LLC
    Claimed 21 November 2025 · notice filed with the Washington Attorney General 16 January 2026
  21. Cerenade
    Claimed 8 October 2025 · notice filed with the California Attorney General 2 January 2026
  22. Soapy Joe’s Car Wash
    Claimed 7 November 2025 · notice filed with the California Attorney General 29 December 2025
  23. Drivestream, Inc.
    Claimed 7 January 2025 · notice filed with the California Attorney General 19 December 2025
  24. Spokane Produce, Inc.
    Claimed 4 September 2025 · notice filed with the Washington Attorney General 6 October 2025
  25. Precision Tax Relief LLC
    Claimed 13 May 2025 · notice filed with the California Attorney General 30 May 2025
  26. Conrey Insurance Brokers & Risk Managers
    Claimed 10 December 2024 · notice filed with the California Attorney General 1 May 2025
  27. siParadigm LLC
    Claimed 23 July 2024 · notice filed with the California Attorney General 19 September 2024
  28. Camino Nuevo Charter Academy
    Claimed 17 August 2023 · notice filed with the California Attorney General 24 April 2024
  29. Green Diamond Resource Company
    Claimed 29 August 2023 · notice filed with the California Attorney General 19 April 2024
  30. Visionary Integration Professionals
    Claimed 19 October 2023 · notice filed with the California Attorney General 15 April 2024
  31. Teleflora
    Claimed 29 November 2023 · notice filed with the California Attorney General 13 March 2024
  32. Stanford University
    Claimed 27 October 2023 · notice filed with the California Attorney General 11 March 2024
  33. Renton School District
    Claimed 30 August 2023 · notice filed with the Washington Attorney General 29 February 2024
  34. Southland Integrated Services, Inc.
    Claimed 20 October 2023 · notice filed with the California Attorney General 10 November 2023
  35. Hospitality Staffing Solutions LLC
    Claimed 29 June 2023 · notice filed with the California Attorney General 7 August 2023

Government advisories

What a claim is, and is not

A claim is a ransomware gang naming an organisation on its leak site, usually to pressure it into paying. It is the gang’s word: some claims are false, recycled from older breaches or exaggerated, and a claim says nothing about whose personal data, if any, was taken. That is why we count claims but do not list the organisations, and why a breach goes on the tracker as confirmed only when the organisation or a regulator says so.

How this is counted

Claims as collected from the gangs’ leak sites by ransomware.live, which says itself that they are unverified. We read its list every day and keep only counts: by month, by the victim’s country and by sector (as ransomware.live classifies them). Matches with official notices are by the organisation’s name, from 30 days before the claim to a year after it, against California’s and Washington’s full breach registers and every official notice on the tracker. A match is not a confirmation rate: those registers only see breaches of their own residents, and names are written differently. We never link to or visit leak sites.

Every gang →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.