Ransomware Group intelligence

Akira

Active

Track Akira with 1670 published victims and 2 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS

Want an alert every time a new ransomware post is published?

Choose the feeds and the countries you care about — we email you when they move.

Victims 1670 Known published victims in this dataset

First discovered 2023-04-26 Earliest victim discovery date

Last discovered 2026-10-22 Latest victim discovery date

Inactive since 1 days Days since the latest known victim

Top country United States 917 victims

Known locations 2 Leak or negotiation infrastructure tracked

Akira is tracked by Breach House as a ransomware group with 1670 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

1670

Leaked 744 44.6%
Pending 926 55.4%
Deleted 0 0.0%

Top Countries

Distribution

Label	Type	Availability	Links
Leak location 2	Onion service	Up checked 4m ago	`akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion`
Leak location 1	Onion service	Up checked 5m ago	`akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion`

Finance / Legal / Insurance 432
Communication / Marketing 320
Manufacturing / Engineering 182
Services 140
Construction / Real Estate 106
Not identified 78
IT 74
Healthcare / Pharma 66
Energy 41
Agriculture / Food 34
Transportation / Travel / Logistics 33
Hospitality / Food & Beverage / Tourism 33
Retail / E-commerce 32
Telecommunications 29
Education 26
Public Sector 16
NGOs / Associations 6
null 2

Typical Attacks (29)

▼

How Akira typically operates, as attributed by MITRE ATT&CK v20.0. Attributed via Akira, Akira, Akira _v2.

T1078 Valid Accounts Initial AccessPersistencePrivilege EscalationStealth

What they do: Akira uses valid account information to remotely access victim networks, such as VPN credentials.

What that means: Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
T1133 External Remote Services Initial AccessPersistence

What they do: Akira uses compromised VPN accounts for initial access to victim networks.

What that means: Adversaries may leverage external-facing remote services to initially access and/or persist within a network.
T1047 Windows Management Instrumentation Execution

What they do: Akira will leverage COM objects accessed through WMI during execution to evade detection.

What that means: Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads.
T1059.001 PowerShell Execution

What they do: Akira has used PowerShell scripts for credential harvesting and privilege escalation.

What that means: Adversaries may abuse PowerShell commands and scripts for execution.
T1059.003 Windows Command Shell Execution

What they do: Akira executes from the Windows command line and can take various arguments for execution.

What that means: Adversaries may abuse the Windows command shell for execution.
T1106 Native API Execution

What they do: Akira executes native Windows functions such as GetFileAttributesW and `GetSystemInfo`.

What that means: Adversaries may interact with the native OS application programming interface (API) to execute behaviors.
T1543 Create or Modify System Process PersistencePrivilege Escalation

What they do: Akira _v2 can create a child process for encryption.

What that means: Adversaries may create or modify system-level processes to repeatedly execute malicious payloads as part of persistence.
T1027.001 Binary Padding Stealth

What they do: Akira has used binary padding to obfuscate payloads.

What that means: Adversaries may use binary padding to add junk data and change the on-disk representation of malware.
T1036.005 Match Legitimate Resource Name or Location Stealth

What they do: Akira has used legitimate names and locations for files to evade defenses.

What that means: Adversaries may match or approximate the name or location of legitimate files, Registry keys, or other resources when naming/placing them.
T1480 Execution Guardrails Stealth

What they do: Akira _v2 will fail to execute if the targeted `/vmfs/volumes/` path does not exist or is not defined.

What that means: Adversaries may use execution guardrails to constrain execution or actions based on adversary supplied and environment specific conditions that are expected to be present on the target.
T1685 Disable or Modify Tools Defense Impairment

What they do: Akira has disabled or modified security tools for defense evasion.

What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
T1558 Steal or Forge Kerberos Tickets Credential Access

What they do: Akira have used scripts to dump Kerberos authentication credentials.

What that means: Adversaries may attempt to subvert Kerberos authentication by stealing or forging Kerberos tickets to enable Pass the Ticket.
T1018 Remote System Discovery Discovery

What they do: Akira uses software such as Advanced IP Scanner and MASSCAN to identify remote hosts within victim networks.

What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
T1057 Process Discovery Discovery

What they do: Akira verifies the deletion of volume shadow copies by checking for the existence of the process ID related to the process created to delete these items.

What that means: Adversaries may attempt to get information about running processes on a system.
T1082 System Information Discovery Discovery

What they do: Akira uses the GetSystemInfo Windows function to determine the number of processors on a victim machine.

What that means: An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
T1083 File and Directory Discovery Discovery

What they do: Akira examines files prior to encryption to determine if they meet requirements for encryption and can be encrypted by the ransomware.

What that means: Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
T1135 Network Share Discovery Discovery

What they do: Akira can identify remote file shares for encryption.

What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
T1482 Domain Trust Discovery Discovery

What they do: Akira uses the built-in Nltest utility or tools such as AdFind to enumerate Active Directory trusts in victim environments.

What that means: Adversaries may attempt to gather information on domain trust relationships that may be used to identify lateral movement opportunities in Windows multi-domain/forest environments.
T1654 Log Enumeration Discovery

What they do: Akira _v2 can enumerate the trace, debug, error, info, and warning logs on targeted systems.

What that means: Adversaries may enumerate system and service logs to find useful data.
T1021.001 Remote Desktop Protocol Lateral Movement

What they do: Akira has used RDP for lateral movement.

What that means: Adversaries may use Valid Accounts to log into a computer using the Remote Desktop Protocol (RDP).
T1213.002 Sharepoint Collection

What they do: Akira has accessed and downloaded information stored in SharePoint instances as part of data gathering and exfiltration activity.

What that means: Adversaries may leverage the SharePoint repository as a source to mine valuable information.
T1560.001 Archive via Utility Collection

What they do: Akira uses utilities such as WinRAR to archive data prior to exfiltration.

What that means: Adversaries may use utilities to compress and/or encrypt collected data prior to exfiltration.
T1219 Remote Access Tools Command and Control

What they do: Akira uses legitimate utilities such as AnyDesk and PuTTy for maintaining remote access to victim environments.

What that means: An adversary may use legitimate remote access tools to establish an interactive command and control channel within a network.
T1567.002 Exfiltration to Cloud Storage Exfiltration

What they do: Akira will exfiltrate victim data using applications such as Rclone.

What that means: Adversaries may exfiltrate data to a cloud storage service rather than over their primary command and control channel.
T1486 Data Encrypted for Impact Impact

What they do: Akira encrypts files in victim environments as part of ransomware operations.

What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
T1489 Service Stop Impact

What they do: Akira _v2 can stop running virtual machines.

What that means: Adversaries may stop or disable services on a system to render those services unavailable to legitimate users.
T1490 Inhibit System Recovery Impact

What they do: Akira will delete system volume shadow copies via PowerShell commands.

What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
T1531 Account Access Removal Impact

What they do: Akira deletes administrator accounts in victim networks prior to encryption.

What that means: Adversaries may interrupt availability of system and network resources by inhibiting access to accounts utilized by legitimate users.
T1657 Financial Theft Impact

What they do: Akira engages in double-extortion ransomware, exfiltrating files then encrypting them, in order to prompt victims to pay a ransom.

What that means: Adversaries may steal monetary resources from targets through extortion, social engineering, technical theft, or other methods aimed at their own financial gain at the expense of the availability of these resources for victims.

Tools Observed (41)

▼

Software Akira has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.

Credential theft

DonPAPI LaZagne Mimikatz

Defense evasion

PowerTool Zemana Anti-Rootkit driver Zemana Anti-Rootkit

Discovery

Advanced IP Scanner Masscan ReconFTW SharpHound SoftPerfect NetScan

Discovery & enumeration

Advanced IP Scanner Bloodhound ldapdomaindump Masscan ReconFTW SharpHound SharpShares SoftPerfect NetScan

Exfiltration

FileZilla MEGA RClone Temp[.]sh WinSCP

Networking & tunnelling

Cloudflared OpenSSH Ngrok

OffSec

Impacket

Offensive security tooling

CrackMapExec Impacket NetExec

RMM Tools

AnyDesk MobaXterm Radmin RustDesk

Remote monitoring & management

AnyDesk MeshAgent MobaXterm Radmin RustDesk TeamViewer

Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.

Crypto Wallets (15)

▼

$3,991,216 Received (USD)

24 Payments

15 Known wallets

$997,459 Largest single payment

2023-07-13 → 2024-09-17 Payment window

bitcoin · 15

Address	Chain	Received (USD)	Payments
`bc1qr0pqfghr9cksfc5arr2rak3lt2y50v03pc76nh`	bitcoin	$997,461	2
`bc1qfdzu6uv2nek524pe7lz4w0mxtt9898vfaegdaj`	bitcoin	$482,181	1
`bc1q0dx45y82r5rt36sm38jv0k4dexwc4nj9z4ryw7`	bitcoin	$446,073	2
`bc1q9wnp6k7xxdqkdv4fa5ceyhv08espuskhu8ghq2`	bitcoin	$351,883	1
`bc1qknumj4326runqxfr58kg0s7v7gu9y5v5t9uv6h`	bitcoin	$298,537	2
`bc1qr0txunr259we37wer7w6et33qyq0n6hv83pw24`	bitcoin	$252,389	1
`bc1q0lwpz2yufw3x9as6f679lwk8jx43g44683x5mc`	bitcoin	$229,395	4
`bc1qhzd63mz9mfucak7yzfn65p6rcsgztnsqr3dak8`	bitcoin	$150,205	1
`bc1qqrsd02sqthm8gej8lfesgpx82saw7q2g5pjtah`	bitcoin	$149,891	1
`bc1q4my6vqq8cg689drf9jccqudjclv67sz4cudkyd`	bitcoin	$139,534	1
`bc1qpwwtck0zhzrj56fxeayz6wz5546nlp607qzpvh`	bitcoin	$109,655	2
`bc1qghj85gz0dkr9jeucana3z4xu50ujtllj50rvj0`	bitcoin	$106,115	2

+3 more wallets not shown (the 12 largest by amount received are listed).

Crowdsourced payment data from Ransomwhere, licensed CC BY 4.0. Figures are what has been reported and attributed to this family, not a confirmed total. Cite as: Cable, Jack. (2024). Ransomwhere: A Crowdsourced Ransomware Payment Dataset (1.1.0) [Data set]. Zenodo. https://doi.org/10.5281/zenodo.6512122

Ransom Notes (3)

▼

The note this group leaves on a compromised machine. Click a filename to read it.

akira_readme_3.txt txt · 3485 chars

Hi friends,

Whatever who you are and what your title is, if you're reading this it means the internal infrastructure of your company is fully or partially dead, all your backups - virtual, physical - everything that we managed to reach - are completely removed. Moreover, we have taken a great amount of your corporate data prior to encryption.

ATTENTION! Strictly prohibited:

- Deleting files with .arika extension;

- Replacing or renaming .arika and .akira files;

- Using third party software to recover your systems.

If you violate these rules, we cannot guarantee a successful recovery.

Well, for now let's keep all the tears and resentment to ourselves and try to build a constructive dialogue. We're fully aware of what damage we caused by locking your internal sources. At the moment, you have to know:

1. Dealing with us you will save A LOT due to we are not interested in ruining you financially. We will study in depth your finance, bank & income statements, your savings, investments etc. and present our reasonable demand to you. If you have an active cyber insurance, let us know and we will guide you how to properly use it. Also, dragging out the negotiation process will lead to failing of the deal.

2. Paying us you save your TIME, MONEY, EFFORTS and be back on track within 24 hours approximately. Our decryptor works properly on any files or systems, so you will be able to check it by requesting a test decryption service from the beginning of our conversation. If you decide to recover on your own, keep in mind that you can permanently lose access to some files or accidentally corrupt them - in this case we won't be able to help.

3. The security report or the exclusive first-hand information that you will receive upon reaching an agreement is of great value, since NO full audit of your network will show you the vulnerabilities that we've managed to detect and use in order to get into, identify backup solutions and download your data.

4. As for your data, if we fail to agree, we will try to sell personal information/trade secrets/databases/source codes - generally speaking, everything that has a value on the darkmarket - to multiple threat actors at once. Then all of this will be published in our blog - akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad[.]onion.

5. We're more than negotiable and will definitely find a way to settle this quickly and reach an agreement which will satisfy both of us.

6. Negotiations with Akira can only be conducted in a chat room, which you can access using the login details provided below or in the notes (a readme.txt file) in your systems. You should ignore any attempts (such as emails/social media messages, phone calls, etc.) to redirect you to another chat or email address (proton.me is often used by unauthorized individuals) on our behalf.

7. Be careful while working with recovery agencies as they often try to use your cyber incident to stuff their pockets. There are many risks for you to lose money and get nothing in return.

If you're indeed interested in our assistance and the services we provide you can reach out to us following simple instructions:

1. Install TOR Browser to get access to our chat room - torproject[.]org/download/.

2. Paste this link - https://akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion/d/[snip] .

3. Use this code - [snip] - to log into our chat.

Keep in mind that the faster you will get in touch, the less damage we cause.

View on RansomLook

akira_readme_2.txt txt · 2908 chars

Hi friends,

ATTENTION! Strictly prohibited:

- Deleting files with .arika extension;

- Replacing or renaming .arika and .akira files;

- Using third party software to recover your systems.

If you violate these rules, we cannot guarantee a successful recovery.

5. We're more than negotiable and will definitely find a way to settle this quickly and reach an agreement which will satisfy both of us.

If you're indeed interested in our assistance and the services we provide you can reach out to us following simple instructions:

1. Install TOR Browser to get access to our chat room - torproject[.]org/download/.

2. Paste this link - https://akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion/d/[snip] .

3. Use this code - [snip] - to log into our chat.

Keep in mind that the faster you will get in touch, the less damage we cause.

View on RansomLook

akira_readme.txt txt · 2662 chars

Hi friends,

Whatever who you are and what your title is if you're reading this it means the internal infrastructure of your company is fully or partially dead, all your backups - virtual, physical - everything that we managed to reach - are completely removed. Moreover, we have taken a great amount of your corporate data prior to encryption.

1. Dealing with us you will save A LOT due to we are not interested in ruining your financially. We will study in depth your finance, bank & income statements, your savings, investments etc. and present our reasonable demand to you. If you have an active cyber insurance, let us know and we will guide you how to properly use it. Also, dragging out the negotiation process will lead to failing of a deal.

2. Paying us you save your TIME, MONEY, EFFORTS and be back on track within 24 hours approximately. Our decryptor works properly on any files or systems, so you will be able to check it by requesting a test decryption service from the beginning of our conversation. If you decide to recover on your own, keep in mind that you can permanently lose access to some files or accidently corrupt them - in this case we won't be able to help.

3. The security report or the exclusive first-hand information that you will receive upon reaching an agreement is of a great value, since NO full audit of your network will show you the vulnerabilities that we've managed to detect and used in order to get into, identify backup solutions and upload your data.

4. As for your data, if we fail to agree, we will try to sell personal information/trade secrets/databases/source codes - generally speaking, everything that has a value on the darkmarket - to multiple threat actors at ones. Then all of this will be published in our blog - https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion.

5. We're more than negotiable and will definitely find the way to settle this quickly and reach an agreement which will satisfy both of us.

If you're indeed interested in our assistance and the services we provide you can reach out to us following simple instructions:

1. Install TOR Browser to get access to our chat room - https://www.torproject.org/download/.

2. Paste this link - https://akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion.

3. Use this code - [snip] - to log into our chat.

Keep in mind that the faster you will get in touch, the less damage we cause.

View on RansomLook

Ransom-note text from RansomLook, licensed CC BY 4.0.

Victims (1670)

Search, filter and paginate the victim timeline for Akira. Showing 1301–1400 of 1670.

Type	Target	Discovered	Country	Business Category	Intel Link	Leak status
Ransomware	Wright Engineers id15340 View details	2024-11-14	United States	Healthcare / Pharma	—	leaked
Wright Engineers focuses on structural, mechanical, ele ctric services and more. We have internal payment information with screenshots o f personal data, medical documents, SSNs, driver licens es etc. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:821E6FEECECFD2FC69F0AD5 0E3BFC4AE492D77FC&dn=wrightengineers.com&tr=udp://track er.openbittorrent.com:80/announce&tr=udp://tracker.open trackr.org:1337/announce&tr=wss://wstracker.online ID 15340
Ransomware	El Dorado Stores and Supermarkets id15339 View details	2024-11-14	Uruguay	Retail / E-commerce	—	leaked
El Dorado Stores and Supermarkets is a family-owned com pany with 100% Uruguayan capital that has been operatin g in the supermarket, store and home sectors for 95 yea rs. We have personal employees data, financial documents, i nternal commercial information etc. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:7CCF3839CE302A2296B7807 AE3FAE40D486AA9DB&dn=eldorado.com.uy&tr=udp://tracker.o penbittorrent.com:80/announce&tr=udp://tracker.opentrac kr.org:1337/announce&tr=wss://wstracker.online ID 15339
Ransomware	Ocean BeautySeafoods id15338 View details	2024-11-14	United States	Agriculture / Food	—	leaked
Ocean Beauty Seafoods is one of the largest and most su ccessful seafood companies in North America, with seven distribution locations across the Western United State s. We have lots of financial documents, personal employees info etc. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:38152E2BB44184E9A1AF62E 9291B32675211D1C1&dn=oceanbeauty.com&tr=udp://tracker.o penbittorrent.com:80/announce&tr=udp://tracker.opentrac kr.org:1337/announce&tr=wss://wstracker.online ID 15338
Ransomware	AACANet id15337 View details	2024-11-14	Canada	Communication / Marketing	—	leaked
AACANet, Inc. The American Alliance of Creditor Attorne ys, is your one-stop destination for comprehensive nati onwide consumer debt collection. You can find a lot of internal corporate information, a ccounting data and some personal files. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives password: Admin#123!root MAGNET URL: magnet:?xt=urn:btih:6DDF5BA41FC8BBCBC6B6579 F02BCA9DEC2A9FEBF&dn=aacanet.org&tr=udp://tracker.openb ittorrent.com:80/announce&tr=udp://tracker.opentrackr.o rg:1337/announce&tr=wss://wstracker.online ID 15337
Ransomware	Ocean Park Mechanical id15336 View details	2024-11-14	Canada	Manufacturing / Engineering	—	leaked
Ocean Park Mechanical excel in diverse projects, from s mall multifamily to large high-rise sites, with experti se in engineering, design-build, 3D design, sheet metal , HVAC, refrigeration, and controls. A lot of corporate information and financial documents can be found, as well as personal data with SSNs. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:72D5CDB4D3A1A450CC86086 0A13427D61620C0DC&dn=oceanpm.com&tr=udp://tracker.openb ittorrent.com:80/announce&tr=udp://tracker.opentrackr.o rg:1337/announce&tr=wss://wstracker.online ID 15336
Ransomware	Datron WorldCommunications id15335 View details	2024-11-14	United States	Communication / Marketing	—	leaked
Datron World Communications, Inc. is the price-performa nce leader for tactical military communications equipme nt recognized globally for performance, ease of operati on, serviceability and low life-cycle cost. We have many NDAs, employees contact information, custo mers data, accounting, HR etc. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:70610127D63741E4E203033 801A26AFC9220EC44&dn=dtwc.com&tr=udp://tracker.openbitt orrent.com:80/announce&tr=udp://tracker.opentrackr.org: 1337/announce&tr=wss://wstracker.online ID 15335
Ransomware	Duplo USA id15334 View details	2024-11-14	United States	Communication / Marketing	—	leaked
Duplo USA Corporation is the leading provider of innova tive print finishing solutions for the graphic arts ind ustry. We have many personal information about customers and p artners, internal financial papers, personal data etc. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:00D882B1CFA5F404BC80A23 52A5F8F8E1002BC37&dn=duplousa.com&tr=udp://tracker.open bittorrent.com:80/announce&tr=udp://tracker.opentrackr. org:1337/announce&tr=wss://wstracker.online ID 15334
Ransomware	MONVIA Holding, a.s. id15333 View details	2024-11-14	Slovakia	Healthcare / Pharma	—	leaked
MONVIA Holding, a.s., is a purely Czech company that ma inly implements complete railway constructions. The hol ding itself was established in 2020. You can find a lot of personal data, confidential infor mation, NDAs, medical information about their employees , their customers data and internal corporate documents . We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives password: monvia.cz MAGNET URL: magnet:?xt=urn:btih:4139F56BEFCDD84E28F3524 768F19FDBEEDDEECD&dn=monvia.cz&tr=udp://tracker.openbit torrent.com:80/announce&tr=udp://tracker.opentrackr.org :1337/announce&tr=wss://wstracker.online ID 15333
Ransomware	Falvey LinenSupply id15332 View details	2024-11-14	United States	Communication / Marketing	—	leaked
Falvey Linen is a company that specializes in providing linen products. It offers napkins, towels, mops, wet m ops, logo mats, and other products. It caters to hotels , healthcare, and cleaning sectors. You will find medical documents, internal financial dat a and employees contact information. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:8BF1A470366E75828EB6C5F 459A77BF924925DFF&dn=falveylinen.com&tr=udp://tracker.o penbittorrent.com:80/announce&tr=udp://tracker.opentrac kr.org:1337/announce&tr=wss://wstracker.online ID 15332
Ransomware	Xtrim TVCable id15331 View details	2024-11-14	Ecuador	Telecommunications	—	leaked
Xtrim Corporate Group in telecommunications of 100% Ecu adorian capital. Company was born from the integration of companies in the telecommunications sector, related services and value-added services. You can find lots of internal financial data, employees and customers contacts. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:F1B3E8135A2AE2828DDCF09 80118C320B812C967&dn=xtrim.com.ec&tr=udp://tracker.open bittorrent.com:80/announce&tr=udp://tracker.opentrackr. org:1337/announce&tr=wss://wstracker.online ID 15331
Ransomware	Action COACH id15330 View details	2024-11-14	Australia	Communication / Marketing	—	leaked
ActionCOACH has empowered thousands of businesses and t heir leaders across the globe, spanning every conceivab le industry. They specialize in helping business owners achieve greater efficiency, build high-performing team s, and increase profitability. There is a lot of personal documents with SSNs, health documents, info about their relatives, driver license s cans, NDAs etc. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives password: fk2vmf6vm3l MAGNET URL: magnet:?xt=urn:btih:2D9667D4DF05DAE7AA56F40 96D730840130FA101&dn=actioncoach.com&tr=udp://tracker.o penbittorrent.com:80/announce&tr=udp://tracker.opentrac kr.org:1337/announce&tr=wss://wstracker.online ID 15330
Ransomware	Yazoo ValleyElectric Power Assosiation id15329 View details	2024-11-14	United States	Energy	—	leaked
Yazoo Valley Electric is a rural electric power associa tion serving parts of six counties in Mississippi. There is a lot of personal information about their empl oyees, including SSNs. Also you will find many internal corporate documents and financial data. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:4911D84C4159005189E6994 231CBD08272A705C7&dn=yazoovalley.com&tr=udp://tracker.o penbittorrent.com:80/announce&tr=udp://tracker.opentrac kr.org:1337/announce&tr=wss://wstracker.online ID 15329
Ransomware	Allegheny Millwork & Lumber id15328 View details	2024-11-14	United States	Finance / Legal / Insurance	—	leaked
For nearly 40 years, Allegheny Millwork has earned a na tional reputation as a leader in the custom millwork in dustry You can find many NDAs, personal files, insurance and p ayment information about their employees and other insi de corporate data. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives password: alleghenymillwork.com MAGNET URL: magnet:?xt=urn:btih:C9B2105AC960B76CB107A57 4BF956CA8FD35302D&dn=alleghenymillwork.com&tr=udp://tra cker.openbittorrent.com:80/announce&tr=udp://tracker.op entrackr.org:1337/announce&tr=wss://wstracker.online ID 15328
Ransomware	Irr Supply Centers id15327 View details	2024-11-14	United States	Communication / Marketing	—	leaked
Irr Supply Centers, Inc. is a leading distributor of Pl umbing, Heating, Cooling, Electrical, and Refrigeration products serving a wide range of customers throughout Western/Central New York and Northern Pennsylvania. You can find many medical documents with blood test res ults, internal corporate information and other info. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:8853F11C930FA86C963075C F8D19715BE1FE968B&dn=irrsupply.com&tr=udp://tracker.ope nbittorrent.com:80/announce&tr=udp://tracker.opentrackr .org:1337/announce&tr=wss://wstracker.online ID 15327
Ransomware	SKS Bottle &Packaging id15326 View details	2024-11-14	United States	Manufacturing / Engineering	—	leaked
SKS Bottle and Packaging was founded in 1986 and suppli es a wide variety of glass, plastic and metal container s, as well as caps and closures, to small businesses an d large companies. About 30 GB of their corporate data are available for downloading now. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:20031F6DC78BC527A85D352 9BB93018C29727FCE&dn=sks-bottle&tr=udp://tracker.openbi ttorrent.com:80/announce&tr=udp://tracker.opentrackr.or g:1337/announce&tr=wss://wstracker.online ID 15326
Ransomware	REV Engineering id15325 View details	2024-11-14	Canada	Manufacturing / Engineering	—	leaked
Rev Engineering Ltd is an offers flexible, durable, rel iable and responsible electrical designs, products and services. 237 GB of their corporate data are available for downloading now. Feel free to check! We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:CEC236A03A8ABA59B66402C 016CBC1462593D90D&dn=reveng&tr=udp://tracker.openbittor rent.com:80/announce&tr=udp://tracker.opentrackr.org:13 37/announce&tr=wss://wstracker.online ID 15325
Ransomware	Bergeron LLC id15324 View details	2024-11-14	United States	Manufacturing / Engineering	—	leaked
Bergeron is an automotive company. It sells new and use d cars, van, truck, SUVs, sedan, coupe, and other vehic les of CHRYSLER, JEEP, RAM brands. The company also off ers repair and maintenance services. 325 GB of data is available for downloading now. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:3CF729AD5CF8EACAAEED6C6 2CA1971D0843CD53C&dn=bergeron&tr=udp://tracker.openbitt orrent.com:80/announce&tr=udp://tracker.opentrackr.org: 1337/announce&tr=wss://wstracker.online ID 15324
Ransomware	mk Technology Group id15323 View details	2024-11-14	Germany	IT	—	leaked
The mk Technology Group is one of the leading suppliers of profile and conveyor technology. Using their own al uminium profile system as a common base technology, mk provides a comprehensive modular system for factory aut omation. We have lots of their internal files - feel fr ee to check! We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:E731C87B3F568A1581497F2 0EEF4296FA53DF360&dn=mk-group&tr=udp://tracker.openbitt orrent.com:80/announce&tr=udp://tracker.opentrackr.org: 1337/announce&tr=wss://wstracker.online ID 15323
Ransomware	Saint Andrews Bureau id15322 View details	2024-11-14	United Kingdom	Communication / Marketing	—	leaked
Sab are leading independent lettings agents with branch es covering Cambridgeshire, Suffolk, Hertfordshire, and London. Specialising in all aspects of property, from management of individual properties, to estate manageme nt and investments. Data is available for downloading. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:5D39C5B1BB653EB9479962B BBFF4F31502ADCD7F&dn=sab&tr=udp://tracker.openbittorren t.com:80/announce&tr=udp://tracker.opentrackr.org:1337/ announce&tr=wss://wstracker.online ID 15322
Ransomware	Ascend Packaging Systems id15321 View details	2024-11-14	United States	Communication / Marketing	—	leaked
Over 50 years ago, Ascend Packaging Systems was founded on the mission to deliver packaging solutions that did more than just function or work well. They provide the equipment and tools companies needed to protect the in tegrity of their products and boost the performance of their operations at the same time. The company has seve ral exclusive distribution arrangements with global equ ipment manufacturers. Data is available for downloading . We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:0BA3542A9FB3ACDA7AD7881 10197F8131AFF85EF&dn=Thomaspackaging.com&tr=udp://track er.openbittorrent.com:80/announce&tr=udp://tracker.open trackr.org:1337/announce&tr=wss://wstracker.online ID 15321
Ransomware	Tedkomp AB id15320 View details	2024-11-14	Sweden	Communication / Marketing	—	leaked
Tedkomp AB is a company that operates in the Informatio n Technology and Services industry. It employs 21-50 pe ople and has $5M-$10M of revenue. The company is headqu artered in Malmoe, Skane, Sweden. Feel free to check 20 GB of their corporate data. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:67DFD9D410D90A44E170E12 FF40193FD0829E622&dn=_tedkomp_se&tr=udp://tracker.openb ittorrent.com:80/announce&tr=udp://tracker.opentrackr.o rg:1337/announce&tr=wss://wstracker.online ID 15320
Ransomware	Pemberton Fabricators, Inc (Sexual Harassment videos inside) id15319 View details	2024-11-14	United States	Manufacturing / Engineering	—	leaked
Pemberton Fabricators, Inc. fabricates light and heavy steel equipment, products, and parts. The Company offer s custom control panels such as nuclear energy manageme nt, materials handling, furnace and combustion control, data acquisition, food processing, factory automation, air handling, and waste treatment. Pemberton Fabricato rs serves customers in the State of New Jersey. The dat a is available for downloading. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:EDF1E8955926FFD28661162 097332FC78A212EBF&dn=pemfab&tr=udp://tracker.openbittor rent.com:80/announce&tr=udp://tracker.opentrackr.org:13 37/announce&tr=wss://wstracker.online ID 15319
Ransomware	Burmeister &Wain Scandinavian Contractor id15318 View details	2024-11-14	Japan	Construction / Real Estate	—	leaked
Burmeister & Wain Scandinavian Contractor designs, buil ds, operates, and maintains diesel engine-based power p lants for both independent power producers and power-ge nerating industrial corporations around the world. BWSC is a subsidiary of Japan-based Mitsui E&S Group. Now y ou can download and explore the materials you might be interested in. We have made the process of uploading company data as s imple as possible for our users. All you need is any to rrent client (like Vuze, Utorrent, qBittorrent or Trans mission to use magnet links). You will find the torrent file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:049182ED08C730D36AB3B89 FF46A71E3F99B709A&dn=bwsc.com&tr=udp://tracker.openbitt orrent.com:80/announce&tr=udp://tracker.opentrackr.org: 1337/announce&tr=wss://litetracker.world ID 15318
Ransomware	Optical Cable Corporation id15317 View details	2024-11-14	United States	Communication / Marketing	—	leaked
Optical Cable Corporation ("OCC®") is a leading manufa cturer of the highest quality tight-buffer fiber optic cables and data communication connectivity solutions. Data is available to download. We have made the process of uploading company data as s imple as possible for our users. All you need is any to rrent client (like Vuze, Utorrent, qBittorrent or Trans mission to use magnet links). You will find the torrent file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:C24A0A93DF1AF21C1DA242D 1D7D65E9F087F496F&dn=occfiber.com&tr=udp://tracker.open bittorrent.com:80/announce&tr=udp://tracker.opentrackr. org:1337/announce&tr=wss://litetracker.world ID 15317
Ransomware	Ultimus id15316 View details	2024-11-14	United States	Communication / Marketing	—	leaked
Developer of business software intended to automate, op timize and integrate processes primarily in the financi al, energy, and medical sector. The company offers busi ness management, compliance, process automation, constr uction management, and enterprise resource planning thr ough a suite of platforms, helping businesses eliminate unnecessary operations and transit towards business au tomation seamlessly. All data you can see here. We have made the process of uploading company data as s imple as possible for our users. All you need is any to rrent client (like Vuze, Utorrent, qBittorrent or Trans mission to use magnet links). You will find the torrent file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:7A6D039A3FAB25B312FBD09 84160B439F8EE1631&dn=ultimus.com&tr=udp://tracker.openb ittorrent.com:80/announce&tr=udp://tracker.opentrackr.o rg:1337/announce ID 15316
Ransomware	Tennis Canada id15315 View details	2024-11-14	Canada	Communication / Marketing	—	leaked
Tennis Canada is the national governing body of tennis within Canada. It works together with the provincial a ssociations to organize tournaments and rules. They al so oversee the Canada Davis Cup team and the Canada Fed Cup team. Lots of interesting are available for downlo ad. We have made the process of uploading company data as s imple as possible for our users. All you need is any to rrent client (like Vuze, Utorrent, qBittorrent or Trans mission to use magnet links). You will find the torrent file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:F169B91076A7717A19630FB F8730954B2B31BC84&dn=tenniscanada.com&tr=udp://tracker. openbittorrent.com:80/announce&tr=udp://tracker.opentra ckr.org:1337/announce ID 15315
Ransomware	Don’s MobileGlass id15314 View details	2024-11-14	United States	Telecommunications	—	leaked
Don's Mobile Glass is full service glass shop that spec ializes in all things glass. You can see their accounti ng, hr, drawings and other documents. We have made the process of uploading company data as s imple as possible for our users. All you need is any to rrent client (like Vuze, Utorrent, qBittorrent or Trans mission to use magnet links). You will find the torrent file above. 1. Open uTorrent, or any another torrent client. 2. Add torrent file or paste the magnet URL to upload t he data safely. 3. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:D0D83320FB63555E0A962AD D6E6778DEEB6C0B9C&dn=donsmobileglass.com&tr=udp://track er.openbittorrent.com:80/announce&tr=udp://tracker.open trackr.org:1337/announce ID 15314
Ransomware	Dumont Printing id15300 View details	2024-11-14	United States	Communication / Marketing	—	leaked
Dumont Printing has been an industry leader for over seventy year s manufacturing quality printed collateral. Dumont provides graph ic design, printing, variable data, finishing and mailing service s. Employee and customer contacts, SSNs and driver licenses will be uploaded soon. ID 15300
Ransomware	Berexco LLC id15299 View details	2024-11-14	United States	Finance / Legal / Insurance	—	pending
Berexco is an independent oil and gas exploration and production company headquartered in Wichita, Kansas. Employees contacts, credit cards with CCV, internal financial doc umentation, contacts of service providers will be uploaded soon. ID 15299
Ransomware	Intercomp id15298 View details	2024-11-14	Malta	Communication / Marketing	—	leaked
Intercomp are the world’s largest manufacturer of portable weighi ng and measurement products, producing the highest quality produc ts at competitive prices. Inside corporate correspondence, customers and employees contacts , internal corporate data will be available for downloading soon. ID 15298
Ransomware	Hillandale Farms id15268 View details	2024-11-12	United States	Agriculture / Food	—	leaked
Today, Hillandale Farms raises over 20 million chickens for eggs and is one of the top 5 egg producers in the country. A lot of inside corporate information with customers contacts, in surance information, personal employees data with credit cards de tails and many others data will be uploaded soon. ID 15268
Ransomware	Followmont TransportPty Ltd id15255 View details	2024-11-11	Australia	Transportation / Travel / Logistics	—	pending
Followmont Transport can provide a complete transport, warehousin g and logistics solution or simply deliver a one-off parcel. We will upload 230Gb of data including NDAs, passports, lot’s of driver licenses, medical documents, detailed financial informati on. ID 15255
Ransomware	Riley Gear Corporation id14596 View details	2024-10-04	United States	Communication / Marketing	—	pending
Riley Gear Corporation, based in St. Augustine, Florida, can exec ute to the highest gear precision standards set by the American G ear Manufacturers Association. We are ready to upload more than 20 GB of data among which you wi ll find NDAs and much information about their employees with SSNs and other personal data. ID 14596
Ransomware	TANYA Creations id14595 View details	2024-10-04	India	Retail / E-commerce	—	pending
Unique Designs, Inc is an award-winning design, sales, and distri bution company with over 40 years’ experience serving the private label needs of the retail industry. A lot of NDAs, personal information of their employees and their relatives, including SSNs, emails, passports, driver licenses. Al so you can find info containing their customers data with phones, emails and addresses. ID 14595
Ransomware	North American Breaker id14591 View details	2024-10-04	United States	Communication / Marketing	—	pending
NABCO sells business to business through wholesale distribution o nly and will not sell directly to contractors or end users. We ar e expanding into new product lines as well as new markets, while constantly expanding our footprint in the electrical wholesale ma rket. We have more than 100 GB of data. There are a lot of confidential files, including NDA's, addresses, phones, emails and SSN's of t heir employees. ID 14591
Ransomware	TRC Worldwide Engineering (Trcww) id14576 View details	2024-10-03	India	Manufacturing / Engineering	—	leaked
TRC Worldwide Engineering is an international and nationally reco gnized professional services firm employing over 500 people acro ss the U.S. and India. We received a large number of documents regarding their projects and work with their partners, including engineering designs, buil ding schematics, financial documents and personal information. ID 14576
Ransomware	Rob Levine & Associates (roblevine.com) id14575 View details	2024-10-03	United States	Finance / Legal / Insurance	—	pending
Over 20 years ago, the personal injury law office of Rob Levine & Associates opened for business in Rhode Island. Since then, lead attorney Rob Levine has become known to have one of the most agg ressive approaches to personal injury litigation in the tri-state area. His dedication to helping Veterans and those in need of S ocial Security benefits has grown the practice into a nationwide law firm. We have a huge amount of data (more than 300 GB) most of which is medical records of military veterans. Besides that you can find payments details, personal information (for example driver licen ses) and many others. ID 14575
Ransomware	ETC Companies id14564 View details	2024-10-02	Jordan	Construction / Real Estate	—	pending
ETC Companies is a General Contractor with a primary focus on lar ge scale affordable housing initiatives throughout the United Sta tes. 10Gb to be released. SSNs, passports, DLs, birth certificate s and many other personal docs. NDAs, agreements and detailed fin ancial data can be found as well. ID 14564
Ransomware	Holmes & Brakel id14562 View details	2024-10-02	Canada	Finance / Legal / Insurance	—	leaked
Holmes & Brakel is a full-service contract office furniture deale rship serving businesses across North America. What can you find interesting here is: Passports, drivers licenses, confidential ag reements and a bit of medical information. Besides that there is financial and accounting data in the archives. ID 14562
Ransomware	Cascade Columbia Distribution id14551 View details	2024-10-01	United States	Finance / Legal / Insurance	—	pending
Cascade Columbia Dist Co is a chemicals company based out in the United States. We are going to release the data soon. Accounting and financial data, detailed employees data, projects, contracts, customer files. ID 14551
Ransomware	ShoreMaster id14550 View details	2024-10-01	United States	Communication / Marketing	—	pending
ShoreMaster is a customer-focused, market driven company manufact uring quality products safely and efficiently. We got about 15Gb of data. We will release it soon. Confidential files, agreements, employee files with personal data, lists with SSNs and many othe r interesting files. ID 14550
Ransomware	CSG Consultants id14548 View details	2024-10-01	United States	Manufacturing / Engineering	—	pending
CSG Consultants is a civil engineering company providing building , engineering, and construction management services. 15Gb of data to be released soon. Lots of passports, DLs, birth certs and oth er employees docs. You will also find NDAs, client's information, projects and so on. ID 14548
Ransomware	Schäfer, dein BäckerGmbH & Co. KG id14464 View details	2024-09-26	Germany	Manufacturing / Engineering	—	pending
Schäfer, dein Bäcker GmbH & Co. KG is a food production company b ased in Germany. We exfiltrated 14Gb of data. Soon you will be ab le to download files with personal information of employees, fina ncial data, partners, lost of contracts and agreements. ID 14464
Ransomware	Concord Management Services id14458 View details	2024-09-25	Russian Federation	Services	—	pending
Concord Management Services LLC is a company that operates in the Architecture, Engineering & Design industry. 23Gb of data will b e uploaded soon. There are files of 2 more companies inside the a rchive. We got detailed personal employee information SSNs, addre sses, phones etc. Numerous financial files, agreements and other business files will be available soon as well. ID 14458
Ransomware	Lawrie Insurance Group id14457 View details	2024-09-25	Canada	Finance / Legal / Insurance	—	pending
Dan Lawrie Insurance Brokers is an insurance company offering the ir customers home, auto, and commercial insurance. 48Gb of data i s to be released soon. Lots of confidential files, personal emplo yee and clients information, detailed financial information, form s with personal information. ID 14457
Ransomware	ATG Communications Group id14456 View details	2024-09-25	Germany	Communication / Marketing	—	leaked
ATG Communications Group an Authorized Telus Dealer has been prov iding wireless products and services to the Canadian business mar ket on a regional and national basis since 1997. We are going to disclose the files we obtained from this company. You will find c redit cards, employee information, agreements and some other inte resting information. ID 14456
Ransomware	Avi Resort & Casino id14422 View details	2024-09-23	United States	Hospitality / Food & Beverage / Tourism	—	leaked
AVI Casino Enterprise, Inc., doing business as AVI Resort & Casin o, provides lodging and hospitality services. We will upload 17Gb of their files soon. You will find employee personal docs, finan ce information, clients data. So, there are a lot of interesting files inside: credit cards, DLs, payment docs... ID 14422
Ransomware	Brown Bottling Group id14418 View details	2024-09-23	United States	Communication / Marketing	—	leaked
Brown Bottling Group is a franchise distributor for Pepsi Cola an d Dr Pepper Beverages representing the top-selling products in vi rtually every category of the beverage industry covering soft dri nks, juices, sport drinks, water, coffee and tea. In the data we are going to upload you can find some personal information of emp loyees including medical info. Financial and projects data is rep resented as well. ID 14418
Ransomware	Idre Fjäll id14415 View details	2024-09-23	Sweden	Hospitality / Food & Beverage / Tourism	—	pending
Idre Fjäll (Idre Mountain) is a ski resort in central Sweden, kno wn for its reliable snow conditions. Over 25Gb of data will be re leased soon. Client and guests data, employee information, accoun ting files and so on. ID 14415
Ransomware	Vickers Engineering id14238 View details	2024-09-10	United States	Manufacturing / Engineering	—	pending
Established in 1970, Vickers has evolved into a world class Preci sion Machining company. 25Gb of data to be disclosed. SSNs, drive r licenses and other employee data. Lots of NDAs, agreements, con tracts. Accounting and financial files are also represented. ID 14238
Ransomware	Baird Mandalas Brockstedt LLC id14181 View details	2024-09-05	United States	Finance / Legal / Insurance	—	pending
Baird Mandalas Brockstedt LLC is a Delaware based law firm. We ha ve obtrained 400gb of their files. Enormous number of personal cl ients data will be uploaded. Birth\death certificates, passports, SSNs, court hearings, evidences and so on. ID 14181
Ransomware	Imetame id14180 View details	2024-09-05	Brazil	Energy	—	leaked
Imetame Group operates in different markets such as metalworking, ornamental rocks, port, energy and oil & gas. 20gb of data. Deta iled personal information of employees (scans), clients data, pro jects, contacts, financial files and more. ID 14180
Ransomware	SWISS CZ id14179 View details	2024-09-05	Czechia	Telecommunications	—	pending
The company SWISS CZ s.r.o. is a 100% subsidiary of SWISS spol. s .r.o. Bratislava, which is part of the multinational ELKO GROUP network with a total annual turnover of more than 2.2 billion USD. We obtained about 15Gb of their data and will upload it soon. Ac counting data, some information on employees and other internal f iles. ID 14179
Ransomware	Cellular Plus id14178 View details	2024-09-05	United States	Finance / Legal / Insurance	—	leaked
Cellular Plus is the fastest growing Verizon Wireless Authorized Retailers in the Northwest. Lots of personal employee data (270 ppl), accounting and financial data, some client files and os on. We will upload the data soon as they refused to cooperate. ID 14178
Ransomware	Jinny Corporation id13923 View details	2024-08-21	United States	Finance / Legal / Insurance	—	pending
Jinny Corporation is the largest multi-cultural and ethnic beauty supply distributor in the world. Over 400Gb of files will be upl oad to our blog. Detailed personal information about employees, c onfidential files, finance, accounting, lots of NDAs and so much other information for research. We will make the files available soon. ID 13923
Ransomware	HOERBIGER Holding id13914 View details	2024-08-21	Switzerland	Healthcare / Pharma	—	pending
Hoerbiger Holding AG is a globally active group headquartered in Zug, Switzerland. 50GB of files to be released soon. Employee per sonal information, clients and customers information, confidentia l agreements, contracts, NDAs, some medical files. Lots of accoun ting and financial data. ID 13914
Ransomware	North Georgia Brick id13903 View details	2024-08-20	United States	Finance / Legal / Insurance	—	leaked
North Georgia Brick offers a diverse selection of bricks, pavers, and stone veneer for residential and commercial projects. 10Gb o f data will be released soon. Employee documents, contracts and a greements, detailed accounting and finance information. ID 13903
Ransomware	The Transit Authority of Northern Kentucky (TANK) id13897 View details	2024-08-19	United States	Public Sector	—	pending
The Transit Authority of Northern Kentucky (TANK) is an agency of the Northern Kentucky community, serving Boone, Campbell, and Ke nton counties and downtown Cincinnati. Files of the organization will be available on our blog soon. Personal information of emplo yees, confidential agreements, contracts, information of incident s a bit of customers data. ID 13897
Ransomware	Boni id13832 View details	2024-08-14	Netherlands	Retail / E-commerce	—	leaked
Boni Supermarkets is a local supermarket organization with 42 bra nches, mainly located in the central Netherlands. 16Gb of data fo r upload. Lots of details financial data, a bit of personal data and other business internal files. ID 13832
Ransomware	Peñoles id13647 View details	2024-08-01	Mexico	Manufacturing / Engineering	—	pending
Peñoles is a mining group with integrated operations in smelting and refining non-ferrous metals and the production of chemicals. Over 30Gb of data will be released soon. Lots of employee persona l documents and certificates, contracts and agreements, detailed financial data. ID 13647
Ransomware	Find Great People id13637 View details	2024-07-31	United States	Other	—	leaked
Find Great People is a talent acquisition and human resources con sulting firm. Confidentiality agreements, confidential clients da ta, employment documents filled with full set of personal inform ation and other interesting files. Everything is about 32Gb. ID 13637
Ransomware	BRASPRESS id13631 View details	2024-07-31	Brazil	Communication / Marketing	—	leaked
BRASPRESS is a company that is always concerned about people's we ll being and is committed to contributing to a more responsible s ociety and a more sustainable environment. More than 70Gb of data . Contracts, agreements, personal information of employees, lots of financial documents. ID 13631
Ransomware	Macadam Europe id13611 View details	2024-07-30	Belgium	Manufacturing / Engineering	—	pending
Macadam Europe is an independent expert in off-lease vehicle insp ections and remarketing support for leasing companies, fleet owne rs and automotive manufacturers. More than 50Gb of data will be a vailable. Lots of HR data, nondisclosures, agreements, a database with customers info, data of their international partners. ID 13611
Ransomware	Olschewski Davie id13610 View details	2024-07-30	Canada	Finance / Legal / Insurance	—	pending
Olschewski Davie real estate lawyers have a combined 50 years of experience and know how to deal with the Land Titles offices and other lawyers but don't know how to treat personal files of thei r clients. 33Gb of data will be uploaded. Full set of documents o f many of their clients will be available. ID 13610
Ransomware	SAGE Publishing id13605 View details	2024-07-30	United States	Finance / Legal / Insurance	—	pending
SAGE Publishing is an independent, academic, and professional pub lisher of high-quality content. We are going to upload their inte rnal high-quality content to our blog. Financial data, agreements and so on. Everything we took from them will be available within a few days. ID 13605
Ransomware	Environmental Design International id13534 View details	2024-07-25	United States	Finance / Legal / Insurance	—	pending
Environmental Design International inc. (EDI) is an MBE/WBE/DBE/W OSB certified professional engineering firm headquartered in Chic ago. NDAs and confidential agreements, employees personal documen ts, detailed financial data. Everything is over 60GB. ID 13534
Ransomware	Empereon Constar id13533 View details	2024-07-25	United States	Services	—	pending
Empereon Constar is a leading business process outsourcing compan y providing end-to-end front and back office solutions. About 800 GB of data will be available for downloading. We hold many SQLs w ith clients data, employee files, detailed financial data. The da ta is more than interesting. ID 13533
Ransomware	SKC West id13509 View details	2024-07-24	United States	Finance / Legal / Insurance	—	pending
SKC-West is the premier supplier for all Industrial Hygiene, Envi ronmental and Safety equipment on the West Coast. Employee data, lots of agreements, confidential files, financial data. Everythin g will be available for downloading soon. ID 13509
Ransomware	American Acryl id13503 View details	2024-07-24	United States	Finance / Legal / Insurance	—	leaked
American Acryl L.P. is a joint venture owned by Nippon Shokubai A merica Industries, Inc. (“NAII”) and Arkema Inc. American Acryl manufactures acrylic acid at its Bayport, Texas facility for the benefit of its owners. They don't need their data so we are going to share the files with you. Customers information, financial fi les, personal employee information, detailed financial data and s o on. ID 13503
Ransomware	Electroalfa id13502 View details	2024-07-24	Romania	Communication / Marketing	—	leaked
Electroalfa is a successful Romanian company, built by visionary people who managed to innovate complex industrial products to hel p move society forward. 10GB of data will be released. Projects i nformation, clients, detailed personal employee information can b e found in the archives we are going to upload. ID 13502
Ransomware	CALDAN Conveyor id13501 View details	2024-07-24	Denmark	Finance / Legal / Insurance	—	leaked
CALDAN Conveyor is a worldwide leading, Danish supplier of overhe ad conveyor and floor conveyor systems. All the dat awill be rele ased soon. Banking information, transactions details, agreements, clients and everything else. ID 13501
Ransomware	siParadigm id13492 View details	2024-07-23	United States	Healthcare / Pharma	—	pending
siParadigm has built a legacy in laboratory testing solutions bas ed on scientific excellence, innovation, and world-class service. 141 GB of data will be uploaded. Full pack of personal data: pas sports, NDAs, confidential agreements, medical reports, driver li censes, birth certificates, social security numbers and other per sonal and docs, financial info, clients and so on. ID 13492
Ransomware	Notarkammer Pfalz id13490 View details	2024-07-23	Germany	Finance / Legal / Insurance	—	pending
The Notary Fund and the Bavarian Notary Association. 200GB of dat a will be available. Numerous SQLs, employee information, detaile d financial data. ID 13490
Ransomware	Win Systems id13489 View details	2024-07-23	Spain	Services	—	leaked
Win systems is a provider of casino solutions for the global gami ng industry. Lots of passport, DNIs (identification cards), credi t cards and other personal documents of employees. Information of clients and casinos, financials, other internal business data. 1 0GB of extremely interesting data. ID 13489
Ransomware	Amino Transport id13360 View details	2024-07-15	—	Transportation / Travel / Logistics	—	leaked
Amino has been in business since 1999 and is a growing Third-Part y Logistics (3PL) Company with 3 Texas locations and employees na tionwide. 20GB of data will be available soon. We will upload the ir files containing lots of financial files, customer invoices, b ank details, checks and so on. ID 13360
Ransomware	Financoop id13313 View details	2024-07-11	Chile	Finance / Legal / Insurance	—	leaked
Financoop is a Savings and Credit Cooperative with more than 15 y ears in the financial market providing financial products and ser vices. 20GB of data will be released soon. Lots of financial data and other internal business files. ID 13313
Ransomware	Sigma id13312 View details	2024-07-11	United States	Communication / Marketing	—	leaked
SIGMA is a California based, leading manufacturer of luxury & bes poke custom faucets, shower systems & accessories. Projects infor mation, some employee data, payments details. Everything will be uploaded soon. ID 13312
Ransomware	P448 id13305 View details	2024-07-10	—	Communication / Marketing	—	pending
P448 is an Italian footwear brand rooted in the belief that eclec ticism, design innovation and experimentation lie at the heart of self-expression. 11GB of data to be released. CDIs, passports an d other personal employees files. Project information, internatio nal contracts and agreements, financial data. ID 13305
Ransomware	Usina Alta Mogiana S/A id13301 View details	2024-07-10	—	Communication / Marketing	—	pending
Usina Alta Mogiana SA produces sugar, ethanol and electricity, wi th occupational safety practices, environmental respect and socia l responsibility. 123GB of clients\customers info, personal emplo yee files, financials, projects information, confidential agreeme nts. ID 13301
Ransomware	Inland Audio Visual id13298 View details	2024-07-09	Canada	Finance / Legal / Insurance	—	pending
Inland AV is a systems integrator of professional audiovisual sys tems, located in Western Canada. 10GB of data to be uploaded soon . Employee personal files, NDAs, contracts, agreements, confident ial files, financial information. ID 13298
Ransomware	Heidmar id13295 View details	2024-07-09	—	Services	—	pending
Heidmar, Inc. is a Global Leader in Crude Oil and Refined Petrole um Marine Transportation Services, Agrees to Business Combination with Nasdaq-Listed MGO Global Inc. 20GB of data for release. Per sonal files of employees, customers information, NDAs, confidenti al agreements, agreements with international customers and so on. ID 13295
Ransomware	Allied Industrial Group id13291 View details	2024-07-08	United States	Communication / Marketing	—	leaked
Allied Industrial Group is committed to providing world class pro ducts with service and support through the use of product knowled ge, product availability and application expertise to our ever ex panding customer base. 15GB of data will be provided. Confidentia l agreements, NDAs, employees personal files, customers informati on and other business data. ID 13291
Ransomware	Esedra id13290 View details	2024-07-08	Italy	Education	—	pending
European School was founded in Lucca in 1967 as a language school to meet the increasingly growing needs of local professionals an d companies to communicate without limits with the whole world. F iles of the school will be soon available here. Personal informat ion, reports, lists of students and so on. ID 13290
Ransomware	Federated Co-operatives id13289 View details	2024-07-08	Canada	Services	—	pending
Federated Co-operatives is a co-operative that supports other co- operatives that serve people in Western Canada. 80GB of data will be available for downloading here soon. Numerous HR files with e mployee data, confidential business files, financials, clients in formation. ID 13289
Ransomware	Explomin id13250 View details	2024-07-03	Peru	Finance / Legal / Insurance	—	pending
Explomin provides integrated solutions to Mining, Oil & Gas and C onstruction sectors with world-class standards in drilling and re lated services. Lots of employees personal information like DNIs, date of birth and so on. Numerous financial files: bank transact ions, invoices, agreements with clients, contracts. 30GB in total . ID 13250
Ransomware	Alimac id13249 View details	2024-07-03	Germany	Finance / Legal / Insurance	—	pending
Alimac is focused on packaging innovations and state-of-the art o f packaging machines. Alimac mainly deals with beverage packaging . 20GB of data will be released. Financial data, HR forms, projec t details and so on. ID 13249
Ransomware	P1 Technologies id13234 View details	2024-07-02	United States	IT	—	leaked
P1 Technologies company provides public cloud services. Blizzard Entertainment, American Honda Motor, Canon, CBS, Disney, DreamWor ks, Intel, MACOM, Netflix, Rockstar, Sony, SpaceX, Warner Brother s and many others world famous companies have been clients of thi s cloud provider. We will upload the data soon and you will see d etails of their cooperation. Additionally you will find there may financial files with payment details and similar data. ID 13234
Ransomware	Conexus Medstaff id13233 View details	2024-07-02	United States	Communication / Marketing	—	pending
Conexus MedStaff is a leading global recruitment agency that empl oys international nurses in the U.S. 20GB of data will be leaked soon. Great amount of personal data like passports, SSNs, birth c ertificates and some other files can be found in the archive. Fin ancial, HR files, agreements are also represented. ID 13233
Ransomware	Salton id13232 View details	2024-07-02	Brazil	Finance / Legal / Insurance	—	leaked
Salton Winery, motivated by the growing interest in the world of wine, maintains qualified customer service and offers customized visitor programs. Almost 30GB of data to be released soon. HR fil es with personal data of employees (brazilians), agreements, cont racts, financial data. ID 13232
Ransomware	SYNERGY PEANUT id13219 View details	2024-07-01	United States	Construction / Real Estate	—	leaked
SYNERGY PEANUT, LLC primarily operates in the Nonresidential Buil ding Operators industry within the Real Estate sector. More than 40Gb to be uploaded soon. Employee personal information, financia ls, agreements, customer information and so on. ID 13219
Ransomware	Power Lube Industrial id13195 View details	2024-06-28	United States	Energy	—	leaked
Power Lube Industrial is a leading Tier-1 supplier of industrial lubrication equipment solutions and a pioneer in the automatic lu brication business. All files we got from them will be available here soon. Numerous financial data, bank details, transactions, p rojects, customer information, agreements, NDAs and other interna l stuff. ID 13195
Ransomware	Wilmots (Legal services) id13194 View details	2024-06-28	United Kingdom	Finance / Legal / Insurance	—	pending
Wilmots provides clients with careful, bespoke legal advice. Each solicitor has their own area of expertise, and we work together to provide the be st advice, tailored to our clients' needs. Craz y amount of personal documents will be uploaded soon. Passport, b irth certificate, DL of even each client! Many court documents, h earing and so on. Highly interesting. ID 13194
Ransomware	Ocasa id13179 View details	2024-06-27	Argentina	Retail / E-commerce	—	leaked
OCASA is an international provider of logistic solutions to compa nies in the e-commerce, general logistics, and health sectors. Yo u will be able to download their files soon. There is a lot of pe rsonal and financial data, operational data of international bran ches, clients data, detailed payment information and so on. ID 13179
Ransomware	Gallos Metal Solutions id13178 View details	2024-06-27	United States	Manufacturing / Engineering	—	leaked
Gallos Metal Solutions Inc specializes in continuous mesh belt at mosphere heat treating. Employees personal files, NDAs, agreement s, financial data and other internal business files. ID 13178
Ransomware	Waterbury Newton id13170 View details	2024-06-26	Canada	Finance / Legal / Insurance	—	pending
A full service law firm located in Kentville, Nova Scotia. We wil l upload files of their client soon. ID 13170
Ransomware	PCI Developments id13166 View details	2024-06-25	Canada	Construction / Real Estate	—	leaked
PCI Developments is an award-winning Vancouver-based real estate developer of complete urban communities. 570Gb of data will be av ailable here. Client agreements, marketing and financial files, b uildings projects, confidential agreements and reports. Some pers onal files. ID 13166
Ransomware	Beckett Thermal Solutions id13165 View details	2024-06-25	United States	Services	—	leaked
Beckett Thermal Solutions is a global pioneer of combustion techn ologies. 11 Gb of data. Lots of projects files, employees names, addresses, emails and other HR information. ID 13165
Ransomware	Utility Datacenter id13164 View details	2024-06-25	United States	Energy	—	leaked
Utility Datacenter is a technology integrator focused on helping organizations and administrators through innovation and virtualiz ation. We will upload data of this datacenter here soon. You will find lots of project files, client information, employee person al files etc. ID 13164
Ransomware	Agron (Five Ten) Adidas TERREX id13142 View details	2024-06-24	Germany	Finance / Legal / Insurance	—	pending
Five Ten or Agron is a German manufacturer of mountain biking, cl imbing, and trail hiking shoes. Originally an American brand foun ded in California in 1985 by Charles Cole, Five Ten became one of the top-selling climbing shoe manufacturers worldwide by October 2011. Adidas purchased the company in November 2011. We are goin g to share 20Gb of data of the company that is closely associated with the most famous brand in the world - Adidas. Finance, human resources, marketing and other business info in will be availabl e soon. ID 13142
Ransomware	Lindermayr id13069 View details	2024-06-19	Germany	Services	—	pending
Quality awareness, reliability and technical innovation have char acterized the Lindermayr company for more than 50 years. They ope rate in the independent business areas of building construction, civil engineering, transportation, prefabrication, gravel works a nd haulage services guarantees you comprehensive solutions from a n expert source. 4GB of their internal data will go public soon. ID 13069

Akira

Overview

Leak Status Distribution

Top Countries

Known Leak Locations (2)

Top Activity Sectors (18)

Typical Attacks (29)

Tools Observed (41)

Credential theft

Defense evasion

Discovery

Discovery & enumeration

Exfiltration

Networking & tunnelling

OffSec

Offensive security tooling

RMM Tools

Remote monitoring & management

Crypto Wallets (15)

Ransom Notes (3)

Victims (1670)

Restricted Access

Now you can see the leak, not just the listing