Ransomware Group intelligence

Akira

Active

Track Akira with 1670 published victims and 2 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS

Want an alert every time a new ransomware post is published?

Choose the feeds and the countries you care about — we email you when they move.

Victims 1670 Known published victims in this dataset

First discovered 2023-04-26 Earliest victim discovery date

Last discovered 2026-10-22 Latest victim discovery date

Inactive since 1 days Days since the latest known victim

Top country United States 917 victims

Known locations 2 Leak or negotiation infrastructure tracked

Akira is tracked by Breach House as a ransomware group with 1670 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

1670

Leaked 744 44.6%
Pending 926 55.4%
Deleted 0 0.0%

Top Countries

Distribution

Label	Type	Availability	Links
Leak location 2	Onion service	Up checked 5h ago	`akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion`
Leak location 1	Onion service	Up checked 5h ago	`akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion`

Finance / Legal / Insurance 432
Communication / Marketing 320
Manufacturing / Engineering 182
Services 140
Construction / Real Estate 106
Not identified 78
IT 74
Healthcare / Pharma 66
Energy 41
Agriculture / Food 34
Transportation / Travel / Logistics 33
Hospitality / Food & Beverage / Tourism 33
Retail / E-commerce 32
Telecommunications 29
Education 26
Public Sector 16
NGOs / Associations 6
null 2

Typical Attacks (29)

▼

How Akira typically operates, as attributed by MITRE ATT&CK v20.0. Attributed via Akira, Akira, Akira _v2.

T1078 Valid Accounts Initial AccessPersistencePrivilege EscalationStealth

What they do: Akira uses valid account information to remotely access victim networks, such as VPN credentials.

What that means: Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
T1133 External Remote Services Initial AccessPersistence

What they do: Akira uses compromised VPN accounts for initial access to victim networks.

What that means: Adversaries may leverage external-facing remote services to initially access and/or persist within a network.
T1047 Windows Management Instrumentation Execution

What they do: Akira will leverage COM objects accessed through WMI during execution to evade detection.

What that means: Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads.
T1059.001 PowerShell Execution

What they do: Akira has used PowerShell scripts for credential harvesting and privilege escalation.

What that means: Adversaries may abuse PowerShell commands and scripts for execution.
T1059.003 Windows Command Shell Execution

What they do: Akira executes from the Windows command line and can take various arguments for execution.

What that means: Adversaries may abuse the Windows command shell for execution.
T1106 Native API Execution

What they do: Akira executes native Windows functions such as GetFileAttributesW and `GetSystemInfo`.

What that means: Adversaries may interact with the native OS application programming interface (API) to execute behaviors.
T1543 Create or Modify System Process PersistencePrivilege Escalation

What they do: Akira _v2 can create a child process for encryption.

What that means: Adversaries may create or modify system-level processes to repeatedly execute malicious payloads as part of persistence.
T1027.001 Binary Padding Stealth

What they do: Akira has used binary padding to obfuscate payloads.

What that means: Adversaries may use binary padding to add junk data and change the on-disk representation of malware.
T1036.005 Match Legitimate Resource Name or Location Stealth

What they do: Akira has used legitimate names and locations for files to evade defenses.

What that means: Adversaries may match or approximate the name or location of legitimate files, Registry keys, or other resources when naming/placing them.
T1480 Execution Guardrails Stealth

What they do: Akira _v2 will fail to execute if the targeted `/vmfs/volumes/` path does not exist or is not defined.

What that means: Adversaries may use execution guardrails to constrain execution or actions based on adversary supplied and environment specific conditions that are expected to be present on the target.
T1685 Disable or Modify Tools Defense Impairment

What they do: Akira has disabled or modified security tools for defense evasion.

What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
T1558 Steal or Forge Kerberos Tickets Credential Access

What they do: Akira have used scripts to dump Kerberos authentication credentials.

What that means: Adversaries may attempt to subvert Kerberos authentication by stealing or forging Kerberos tickets to enable Pass the Ticket.
T1018 Remote System Discovery Discovery

What they do: Akira uses software such as Advanced IP Scanner and MASSCAN to identify remote hosts within victim networks.

What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
T1057 Process Discovery Discovery

What they do: Akira verifies the deletion of volume shadow copies by checking for the existence of the process ID related to the process created to delete these items.

What that means: Adversaries may attempt to get information about running processes on a system.
T1082 System Information Discovery Discovery

What they do: Akira uses the GetSystemInfo Windows function to determine the number of processors on a victim machine.

What that means: An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
T1083 File and Directory Discovery Discovery

What they do: Akira examines files prior to encryption to determine if they meet requirements for encryption and can be encrypted by the ransomware.

What that means: Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
T1135 Network Share Discovery Discovery

What they do: Akira can identify remote file shares for encryption.

What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
T1482 Domain Trust Discovery Discovery

What they do: Akira uses the built-in Nltest utility or tools such as AdFind to enumerate Active Directory trusts in victim environments.

What that means: Adversaries may attempt to gather information on domain trust relationships that may be used to identify lateral movement opportunities in Windows multi-domain/forest environments.
T1654 Log Enumeration Discovery

What they do: Akira _v2 can enumerate the trace, debug, error, info, and warning logs on targeted systems.

What that means: Adversaries may enumerate system and service logs to find useful data.
T1021.001 Remote Desktop Protocol Lateral Movement

What they do: Akira has used RDP for lateral movement.

What that means: Adversaries may use Valid Accounts to log into a computer using the Remote Desktop Protocol (RDP).
T1213.002 Sharepoint Collection

What they do: Akira has accessed and downloaded information stored in SharePoint instances as part of data gathering and exfiltration activity.

What that means: Adversaries may leverage the SharePoint repository as a source to mine valuable information.
T1560.001 Archive via Utility Collection

What they do: Akira uses utilities such as WinRAR to archive data prior to exfiltration.

What that means: Adversaries may use utilities to compress and/or encrypt collected data prior to exfiltration.
T1219 Remote Access Tools Command and Control

What they do: Akira uses legitimate utilities such as AnyDesk and PuTTy for maintaining remote access to victim environments.

What that means: An adversary may use legitimate remote access tools to establish an interactive command and control channel within a network.
T1567.002 Exfiltration to Cloud Storage Exfiltration

What they do: Akira will exfiltrate victim data using applications such as Rclone.

What that means: Adversaries may exfiltrate data to a cloud storage service rather than over their primary command and control channel.
T1486 Data Encrypted for Impact Impact

What they do: Akira encrypts files in victim environments as part of ransomware operations.

What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
T1489 Service Stop Impact

What they do: Akira _v2 can stop running virtual machines.

What that means: Adversaries may stop or disable services on a system to render those services unavailable to legitimate users.
T1490 Inhibit System Recovery Impact

What they do: Akira will delete system volume shadow copies via PowerShell commands.

What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
T1531 Account Access Removal Impact

What they do: Akira deletes administrator accounts in victim networks prior to encryption.

What that means: Adversaries may interrupt availability of system and network resources by inhibiting access to accounts utilized by legitimate users.
T1657 Financial Theft Impact

What they do: Akira engages in double-extortion ransomware, exfiltrating files then encrypting them, in order to prompt victims to pay a ransom.

What that means: Adversaries may steal monetary resources from targets through extortion, social engineering, technical theft, or other methods aimed at their own financial gain at the expense of the availability of these resources for victims.

Tools Observed (41)

▼

Software Akira has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.

Credential theft

DonPAPI LaZagne Mimikatz

Defense evasion

PowerTool Zemana Anti-Rootkit driver Zemana Anti-Rootkit

Discovery

Advanced IP Scanner Masscan ReconFTW SharpHound SoftPerfect NetScan

Discovery & enumeration

Advanced IP Scanner Bloodhound ldapdomaindump Masscan ReconFTW SharpHound SharpShares SoftPerfect NetScan

Exfiltration

FileZilla MEGA RClone Temp[.]sh WinSCP

Networking & tunnelling

Cloudflared OpenSSH Ngrok

OffSec

Impacket

Offensive security tooling

CrackMapExec Impacket NetExec

RMM Tools

AnyDesk MobaXterm Radmin RustDesk

Remote monitoring & management

AnyDesk MeshAgent MobaXterm Radmin RustDesk TeamViewer

Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.

Crypto Wallets (15)

▼

$3,991,216 Received (USD)

24 Payments

15 Known wallets

$997,459 Largest single payment

2023-07-13 → 2024-09-17 Payment window

bitcoin · 15

Address	Chain	Received (USD)	Payments
`bc1qr0pqfghr9cksfc5arr2rak3lt2y50v03pc76nh`	bitcoin	$997,461	2
`bc1qfdzu6uv2nek524pe7lz4w0mxtt9898vfaegdaj`	bitcoin	$482,181	1
`bc1q0dx45y82r5rt36sm38jv0k4dexwc4nj9z4ryw7`	bitcoin	$446,073	2
`bc1q9wnp6k7xxdqkdv4fa5ceyhv08espuskhu8ghq2`	bitcoin	$351,883	1
`bc1qknumj4326runqxfr58kg0s7v7gu9y5v5t9uv6h`	bitcoin	$298,537	2
`bc1qr0txunr259we37wer7w6et33qyq0n6hv83pw24`	bitcoin	$252,389	1
`bc1q0lwpz2yufw3x9as6f679lwk8jx43g44683x5mc`	bitcoin	$229,395	4
`bc1qhzd63mz9mfucak7yzfn65p6rcsgztnsqr3dak8`	bitcoin	$150,205	1
`bc1qqrsd02sqthm8gej8lfesgpx82saw7q2g5pjtah`	bitcoin	$149,891	1
`bc1q4my6vqq8cg689drf9jccqudjclv67sz4cudkyd`	bitcoin	$139,534	1
`bc1qpwwtck0zhzrj56fxeayz6wz5546nlp607qzpvh`	bitcoin	$109,655	2
`bc1qghj85gz0dkr9jeucana3z4xu50ujtllj50rvj0`	bitcoin	$106,115	2

+3 more wallets not shown (the 12 largest by amount received are listed).

Crowdsourced payment data from Ransomwhere, licensed CC BY 4.0. Figures are what has been reported and attributed to this family, not a confirmed total. Cite as: Cable, Jack. (2024). Ransomwhere: A Crowdsourced Ransomware Payment Dataset (1.1.0) [Data set]. Zenodo. https://doi.org/10.5281/zenodo.6512122

Ransom Notes (3)

▼

The note this group leaves on a compromised machine. Click a filename to read it.

akira_readme_3.txt txt · 3485 chars

Hi friends,

Whatever who you are and what your title is, if you're reading this it means the internal infrastructure of your company is fully or partially dead, all your backups - virtual, physical - everything that we managed to reach - are completely removed. Moreover, we have taken a great amount of your corporate data prior to encryption.

ATTENTION! Strictly prohibited:

- Deleting files with .arika extension;

- Replacing or renaming .arika and .akira files;

- Using third party software to recover your systems.

If you violate these rules, we cannot guarantee a successful recovery.

Well, for now let's keep all the tears and resentment to ourselves and try to build a constructive dialogue. We're fully aware of what damage we caused by locking your internal sources. At the moment, you have to know:

1. Dealing with us you will save A LOT due to we are not interested in ruining you financially. We will study in depth your finance, bank & income statements, your savings, investments etc. and present our reasonable demand to you. If you have an active cyber insurance, let us know and we will guide you how to properly use it. Also, dragging out the negotiation process will lead to failing of the deal.

2. Paying us you save your TIME, MONEY, EFFORTS and be back on track within 24 hours approximately. Our decryptor works properly on any files or systems, so you will be able to check it by requesting a test decryption service from the beginning of our conversation. If you decide to recover on your own, keep in mind that you can permanently lose access to some files or accidentally corrupt them - in this case we won't be able to help.

3. The security report or the exclusive first-hand information that you will receive upon reaching an agreement is of great value, since NO full audit of your network will show you the vulnerabilities that we've managed to detect and use in order to get into, identify backup solutions and download your data.

4. As for your data, if we fail to agree, we will try to sell personal information/trade secrets/databases/source codes - generally speaking, everything that has a value on the darkmarket - to multiple threat actors at once. Then all of this will be published in our blog - akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad[.]onion.

5. We're more than negotiable and will definitely find a way to settle this quickly and reach an agreement which will satisfy both of us.

6. Negotiations with Akira can only be conducted in a chat room, which you can access using the login details provided below or in the notes (a readme.txt file) in your systems. You should ignore any attempts (such as emails/social media messages, phone calls, etc.) to redirect you to another chat or email address (proton.me is often used by unauthorized individuals) on our behalf.

7. Be careful while working with recovery agencies as they often try to use your cyber incident to stuff their pockets. There are many risks for you to lose money and get nothing in return.

If you're indeed interested in our assistance and the services we provide you can reach out to us following simple instructions:

1. Install TOR Browser to get access to our chat room - torproject[.]org/download/.

2. Paste this link - https://akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion/d/[snip] .

3. Use this code - [snip] - to log into our chat.

Keep in mind that the faster you will get in touch, the less damage we cause.

View on RansomLook

akira_readme_2.txt txt · 2908 chars

Hi friends,

ATTENTION! Strictly prohibited:

- Deleting files with .arika extension;

- Replacing or renaming .arika and .akira files;

- Using third party software to recover your systems.

If you violate these rules, we cannot guarantee a successful recovery.

5. We're more than negotiable and will definitely find a way to settle this quickly and reach an agreement which will satisfy both of us.

If you're indeed interested in our assistance and the services we provide you can reach out to us following simple instructions:

1. Install TOR Browser to get access to our chat room - torproject[.]org/download/.

2. Paste this link - https://akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion/d/[snip] .

3. Use this code - [snip] - to log into our chat.

Keep in mind that the faster you will get in touch, the less damage we cause.

View on RansomLook

akira_readme.txt txt · 2662 chars

Hi friends,

Whatever who you are and what your title is if you're reading this it means the internal infrastructure of your company is fully or partially dead, all your backups - virtual, physical - everything that we managed to reach - are completely removed. Moreover, we have taken a great amount of your corporate data prior to encryption.

1. Dealing with us you will save A LOT due to we are not interested in ruining your financially. We will study in depth your finance, bank & income statements, your savings, investments etc. and present our reasonable demand to you. If you have an active cyber insurance, let us know and we will guide you how to properly use it. Also, dragging out the negotiation process will lead to failing of a deal.

2. Paying us you save your TIME, MONEY, EFFORTS and be back on track within 24 hours approximately. Our decryptor works properly on any files or systems, so you will be able to check it by requesting a test decryption service from the beginning of our conversation. If you decide to recover on your own, keep in mind that you can permanently lose access to some files or accidently corrupt them - in this case we won't be able to help.

3. The security report or the exclusive first-hand information that you will receive upon reaching an agreement is of a great value, since NO full audit of your network will show you the vulnerabilities that we've managed to detect and used in order to get into, identify backup solutions and upload your data.

4. As for your data, if we fail to agree, we will try to sell personal information/trade secrets/databases/source codes - generally speaking, everything that has a value on the darkmarket - to multiple threat actors at ones. Then all of this will be published in our blog - https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion.

5. We're more than negotiable and will definitely find the way to settle this quickly and reach an agreement which will satisfy both of us.

If you're indeed interested in our assistance and the services we provide you can reach out to us following simple instructions:

1. Install TOR Browser to get access to our chat room - https://www.torproject.org/download/.

2. Paste this link - https://akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion.

3. Use this code - [snip] - to log into our chat.

Keep in mind that the faster you will get in touch, the less damage we cause.

View on RansomLook

Ransom-note text from RansomLook, licensed CC BY 4.0.

Victims (1670)

Search, filter and paginate the victim timeline for Akira. Showing 701–800 of 1670.

Type	Target	Discovered	Country	Business Category	Intel Link	Leak status
Ransomware	Molod Spitz & DeSantis id22292 View details	2025-09-11	United States	Finance / Legal / Insurance	—	pending
Molod Spitz & DeSantis, P.C. specializes in defending clients in complex liability matters in New York and New Jersey courts. The firm prides itself on being trial-ready, with a long record of su ccessful verdicts and a commitment to tracking metrics that refle ct their results. We are going to upload 62GB of corporate data. Employee documents , medical information, confidential agreements, lots of customers information, detailed finance and accounting files, lots of clie nts information, contract and agreements with customers, police r eports, investigations, court hearings, NDAs, etc. ID 22292
Ransomware	TDK Technologies id22291 View details	2025-09-11	United States	IT	—	leaked
TDK Technologies provides information technology consulting and c ustom software development for businesses through either staff au gmentation or outsourced project solution delivery. We are going to upload company data soon. You will find financial data (audit, payment details,financial reports, invoices), emplo yees and customers information (passports, driver's license, SSN ) confidential information, NDAs and other documents with detaile d personal information so on. ID 22291
Ransomware	Commercial Casework id22250 View details	2025-09-10	United States	Communication / Marketing	—	pending
Commercial Casework Inc. has been a leading provider of custom ar chitectural woodwork and cabinetry in Northern California since 1 976, situated in the San Francisco Bay Area. The company speciali zes in high-end tenant improvements for various commercial spaces , including Board Rooms, Cafes, and Reception Areas. We are going to upload 12GB of corporate data. A lot of hr data, medical information, accounting files, payment details, client in formation, project information, etc. ID 22250
Ransomware	Venezia id22249 View details	2025-09-10	Italy	Finance / Legal / Insurance	—	pending
Venezia, headquartered in Limerick, PA, provides high quality tra nsport & trucking services for the Liquid, Dry Bulk & Specialty c ommodities transportation industry to 48 states and Canada. We are going to upload 35GB of corporate data. Employee data (DOB , addresses, phones, emails, medical certificates, passports, dri ver licenses and so on), finance and accounting files, payment de tails, client information, project information, NDAs, etc. ID 22249
Ransomware	Fusion Homes id22229 View details	2025-09-09	Canada	Finance / Legal / Insurance	—	leaked
Fusion Homes is a homebuilder dedicated to guiding customers thro ugh their Home Buying Journey. We are going to upload 15GB of corporate data. A lot of financial and accounting data, personal information of employees (DOB, add ress, email, phone and so on), client information, project inform ation, etc. ID 22229
Ransomware	E&S Food id22228 View details	2025-09-09	United States	Agriculture / Food	—	pending
E&S Food, Inc., was started in 1980 by Settimo Guttilla, selling grated cheese from his car and his first warehouse was his garage . Now utilizing a warehouse over 50,000 square feet, E&S has over 3,000 products, and the company employs over 50 employees. We are going to upload 190GB of corporate data. A lot of financia l and accounting data, credit card details, personal information of employees, client information, a bit of client data, NDAs, etc . ID 22228
Ransomware	General Converting id22178 View details	2025-09-08	United States	Communication / Marketing	—	leaked
General Converting, Inc. was founded in 1982 and was comprised th en of three people, a 1 color press, a small die cutter, and a gl uer. Today, the thriving GCI remains an independent company and n ow employs a staff of 65 people, most of whom have been with the company for 10 years and longer. We are going to upload 138 GB of corporate data. Employee persona l information (name, DOB and is on), detailed financial data, con fidential agreements, lots of customer files, NDAs, etc. ID 22178
Ransomware	RBJ Escrow Software id22177 View details	2025-09-08	United States	IT	—	leaked
RBJ Escrow Software leverages 35 years of California escrow exper ience to provide advanced software solutions for escrow processin g, title production, and trust accounting. We are going to upload 20GB of corporate data. A a lot of client data, HR files, detailed financial and accounting data, lots of f iles with personal data of employees, NDAs, etc. ID 22177
Ransomware	Vardeco id22175 View details	2025-09-08	Switzerland	Communication / Marketing	—	leaked
VARDECO SA specializes in high precision bar turning and screw ma chining, offering services for small, medium, and large custom se ries. We are going to upload 42 GB of corporate data. Employee personal files (passports, driver licenses, SSNs), project files, financi al data, drawings and specifications, customer information, NDAs, etc. ID 22175
Ransomware	Keller Laser AG id22174 View details	2025-09-08	Switzerland	Manufacturing / Engineering	—	leaked
Keller Laser AG – Expertise in sheet metal processing since 1995. Keller Laser AG is an owner-managed Swiss company and is now one of the leading suppliers in industrial sheet metal processing. We are going to upload 9 GB of data. Almost all files are drawing s. So, if you are interested, welcome. ID 22174
Ransomware	Indo-MIM id22149 View details	2025-09-05	India	Communication / Marketing	—	pending
Indo-MIM s a manufacturer and supplier of precision-engineered pr oducts using Metal Injection Molding. We are going to upload 13 GB of corporate documents. A huge numbe r of employee personal files (Full Name in Native Language, Other Names Used, Telecode Name Used, Sex, Marital Status, Date of Bir th, Place of Birth, Country/Region of Origin (Nationality), count ry/region of origin (nationality) above, National Identification Number, U.S. Social Security Number, U.S. Taxpayer ID Number, Hom e Address, City, State/Province, Postal Zone/ZIP Code), financial data, project information, drawings and specifications, customer information and so on. ID 22149
Ransomware	Michigan Sugar id22148 View details	2025-09-05	United States	Finance / Legal / Insurance	—	leaked
Founded in 1906 and headquartered in Bay City Michigan. Michigan Sugar manufactures granulated, powdered, liquid, and brown sugars . We are ready to upload more than 40GB files of essential corporat e documents such as: financial data (audit, payment details,finan cial reports, invoices), employees and customers information (dri ver's license, death certificate, medical information, emails, ph ones) confidential information, NDAs and other documents with det ailed personal information so on. ID 22148
Ransomware	Spokane Produce id22120 View details	2025-09-04	United States	Communication / Marketing	—	pending
Spokane Produce, Inc. is a family-owned business established in t he 1940s, specializing in the distribution of high-quality fresh produce, cut fruits and vegetables, deli items, and floral arrang ements. We are ready to upload more than 74GB files of essential corporat e documents such as: financial data (audit, payment details,finan cial reports, invoices), employees and customers information (dri ver's license, birth certificate, medical information, emails, ph ones) confidential information, NDAs and other documents with det ailed personal information so on. ID 22120
Ransomware	Carus id22119 View details	2025-09-04	Finland	Finance / Legal / Insurance	—	pending
Carus provides solutions to environmental concerns involving wate r, air and soil with specializations in the area of chemical oxid ation and sequestration. We are ready to upload more than 161GB files of essential corpora te documents such as: financial data (audit, payment details,fina ncial reports, invoices), employees and customers information (pa ssports, credit cards, medical information, emails, phones) confi dential information, NDAs and other documents with detailed perso nal information so on. ID 22119
Ransomware	Williams Patent Crusher & PulverizerCo. id22105 View details	2025-09-03	United States	Communication / Marketing	—	pending
Williams Patent Crusher & Pulverizer Co. offers a vast product line including Roller Mills, Pulverizers, Hamme r Mills, Primary & Secondary Crushers, Impact Dryer Mil ls, Impact Crushers, Refuse Shredders, Shear Shredders, Nife Hogs, Nife Granulators, Wood Hogs, Chippers, Apro n Pan Feeders, Feeder Breakers, Air Classifiers, Single & Double Roll Crushers, and so much more. We are going to upload more than 33 GB of essential cor porate documents such as: employees personal emails, pa ssport, driver license, SSNs, personal emails and home addresses, confidentiality agreements, projects data, e tc. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. Open uTorrent, or any another torrent client. Add torrent file or paste the magnet URL to upload the data safely. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:DE4C9C42DF82EF768410A6F267B114F5032 04C00&dn=williamscrusher.com&tr=udp://tracker.openbitto rrent.com:80/announce&tr=udp://tracker.opentrackr.org:1 337/announce ID 22105
Ransomware	The Bank of Romney id22104 View details	2025-09-03	United States	Finance / Legal / Insurance	—	pending
The Bank of Romney is a locally owned and operated community bank serving Hampshire County and surrounding areas since 1888. The b ank offers a range of personal and business banking services, inc luding checking and savings accounts, various loan options, and m erchant services. We are going to upload corporate data soon. You will find financi al information, clients information, a bit of accounting files, e mployee files, etc. ID 22104
Ransomware	Jack Resnick & Sons id22103 View details	2025-09-03	United States	Construction / Real Estate	—	leaked
Jack Resnick & Sons provide a variety of real estate availabiliti es, including notable residential buildings like Symphony House a nd Gracie Mews. We are going to upload corporate data soon. You will find lots of contracts and form containing clients DOB, addresses, phones, em ails, financial and accounting files, payment details, and other data. ID 22103
Ransomware	TSI Accessory Group,Stanley Creations Inc, iStar Jewelry, Roman & Sunstone. id22099 View details	2025-09-03	United States	Finance / Legal / Insurance	—	pending
We are going to upload about 35 gb of essential corporate documen ts of a bunch of companies. You will find in the archives: financ ial data (audit, payment details,financial reports, invoices), em ployees and customers information (passports, Social Security Num bers, medical information, emails, phones) confidential informati on and other documents with detailed personal information so on. ID 22099
Ransomware	Natare id22085 View details	2025-09-02	United States	Finance / Legal / Insurance	—	pending
Natare Pools specializes in designing, building, and installing c ustom stainless steel pools, spas, and related equipment for vari ous applications including competition, commercial, and community use. We are ready to upload more than 10Gb files of essential corporat e documents such as: financial data (audit, payment details, fina ncial reports invoices), employees and customers information (ema ils, phones, addresses) confidential information and other docume nts with detailed personal information so on. ID 22085
Ransomware	Pooler Enterprises id22084 View details	2025-09-02	United States	Communication / Marketing	—	pending
Pooler Enterprises is a seasoned provider of commercial land deve lopment services based in Fishers, NY, with over three decades of experience. We are ready to upload more than 15Gb files of essential corporat e documents such as: financial data (payment details, invoices), employees and customers information (emails, phones, addresses) c onfidential information and other documents with detailed persona l information so on. ID 22084
Ransomware	Genmark Automation id22067 View details	2025-09-01	United States	Finance / Legal / Insurance	—	pending
Founded in 1985 and headquartered in California. Genmark Automati on is a worldwide developer and manufacturer of tool and fab auto mation equipment solutions for the semiconductor, flat panel, sol ar, LED, data storage, and associated industries. We are ready to upload more than 47Gb files of essential corporat e documents such as: financial data (audit, payment details,finan cial reports, invoices), employees and customers information (gre en cards, passports, driver's license, Social Security Numbers, c redit cards, death/birth certificate, medical information, emails , phones, addresses) confidential information, NDAs and other doc uments with detailed personal information so on. The company management refused to take the situation seriously. S o their employees and customers will have to face all the consequ ences of their data being compromised. ID 22067
Ransomware	Automated Business Solutions id22066 View details	2025-09-01	United States	Services	—	pending
Automated Business Solutions, Inc. is a designer and supplier of office equipments and comprehensive business solutions. We are ready to upload more than 93Gb files of essential corporat e documents such as: financial data (audit, payment details,finan cial reports, invoices), employees and customers information (cre dit cards, death certificates, medical information, emails, phone s, addresses) confidential information, NDAs and other documents with detailed personal information so on. ID 22066
Ransomware	RMO id22029 View details	2025-08-29	United States	Communication / Marketing	—	pending
RMO Orthodontics is a leading manufacturer and supplier of innova tive and high-quality orthodontic instruments and supplies. They offer a comprehensive catalog of products including brackets, arc hwires, and accessories, catering primarily to orthodontic profes sionals. We are going to upload company data soon. You will find financial data (audit, payment details,financial reports, invoices), emplo yees and customers information (passports, emails, phones, Social Security Cards, birth certificate) confidential information, NDA s and other documents with detailed personal information so on. ID 22029
Ransomware	The Fredericks id22028 View details	2025-08-29	United States	Finance / Legal / Insurance	—	leaked
The Fredericks Company is a leading manufacturer and innovator sp ecializing in tilt and vacuum measurement sensors. We are going to upload company data soon. You will find financial data (audit, payment details,financial reports, invoices), emplo yees and customers information (emails, phones) confidential info rmation, NDAs and other documents with detailed personal informat ion so on. ID 22028
Ransomware	Echo id21979 View details	2025-08-27	United States	Finance / Legal / Insurance	—	pending
Echo is an industry leader in the design, marketing and distribut ion of home and fashion accessories. Echo is as diverse in its co lor palette and patterns as it is rich in its family heritage and history. Since 1923, Echo has focused on the principles of creat ivity, service, innovation and quality established by its founder s, Edgar and Theresa Hyman. We are ready to upload more than 331GB files of essential corpora te documents such as: financial data (audit, payment details, inv oices), employees and customers information (driver's license, So cial Security Numbers, phones, emails, death/birth certificate, m edical information) confidential information, NDAs and other docu ments with detailed personal information so on. ID 21979
Ransomware	Ben's Asphalt id21978 View details	2025-08-27	United States	Finance / Legal / Insurance	—	pending
Ben's Asphalt is an asphalt maintenance & parking lot management company in Southern California with a national presence. The comp any was founded in 1961 and is headquartered in Santa Ana. We are ready to upload more than 100GB files of essential corpora te documents such as: financial data (audit, payment details, inv oices), employees and customers information (phones, emails, medi cal information) confidential information, NDAs and other documen ts with detailed personal information so on. ID 21978
Ransomware	Baycoat id21977 View details	2025-08-27	Canada	Healthcare / Pharma	—	leaked
Baycoat is currently the largest steel coil coater in Canada. Bay coat employs a workforce of approximately 175, operating two coat ing lines that are capable of accommodating numerous paint system s, offering well over 1,000 colours. We are going to upload about 19gb of corporate files. You will fi nd passports and DLs of employees, personal and corporate financi al information, medical information, accounting (payment details, reports and so on), confidential agreements and contracts, NDA, etc. ID 21977
Ransomware	Colabor id21920 View details	2025-08-24	Canada	Finance / Legal / Insurance	—	pending
Colabor provides grocery distribution and wholesale services. The ir headquarters are located in Boucherville, Quebec, Canada. Trading Ticker Symbol: GCL We are going to upload about 60gb of corporate files. You will fi nd lots of documents and forms with personal data of more than 30 0 employees including scanned docs (DOB, Canadian passports, addr esses, SSNs, phones, emergency phones, emails, medical informatio n and so on), detailed financial and accounting information (cred it cards information with security codes, payment details, custom ers files, employee financial information), agreements and contra cts, NDAs, etc. ID 21920
Ransomware	Hill Peterson CarperBee & Deitzler id21907 View details	2025-08-22	United States	Finance / Legal / Insurance	—	leaked
The Law Firm of Hill, Peterson, Carper, Bee & Deitzler, PLLC, beg an in 1980, when senior partner, R. Edison Hill, departed a large corporate and insurance defense firm to begin a small personal i njury practice. Today, our team of skilled attorneys engage exclu sively in representing personal injury victims. We are going to upload company data soon. You will find financial data (payment details, invoices),confidential information and ot her documents with personal information so on. A bit of personal files and customers data. ID 21907
Ransomware	Exotherm id21906 View details	2025-08-22	United States	Finance / Legal / Insurance	—	leaked
Exotherm Corporation is a leader in the development and manufactu re of custom-made heating devices. They produce Uniflux brand con vection heaters. We are ready to upload more than 30GB files of essential corporat e documents such as: financial data (audit, payment details, invo ices), employees and customers information (Social Security Numbe rs, phones, medical information) confidential information, NDAs a nd other documents with detailed personal information so on. ID 21906
Ransomware	Hogan Construction Group id21905 View details	2025-08-22	United States	Construction / Real Estate	—	leaked
Hogan Construction Group is a company that provides a comprehensi ve platform of value-based, client-focused construction managemen t services. It offers interior renovations, design and bid-Build, historic restorations, and adaptive re-use. We are ready to upload more than 16GB files of essential corporat e documents such as: financial data (audit, payment details, invo ices), employees and customers information (Social Security Numbe rs, phones, emails, death/birth certificate ) confidential inform ation and other documents with detailed personal information and so on. ID 21905
Ransomware	Mark Edward Partners id21904 View details	2025-08-22	United States	Finance / Legal / Insurance	—	pending
Mark Edward Partners is an independent full-service international brokerage firm that offers comprehensive insurance solutions to a diverse clients. We are going to upload about 6gb of corporate files. You will fin d lots of client information, some documents contain personal inf ormation, numerous confidentiality agreements and contracts, NDAs , etc. ID 21904
Ransomware	Carmichael Engineering id21903 View details	2025-08-22	Canada	Manufacturing / Engineering	—	leaked
Carmichael Engineering provides commercial air-conditioning and h eating, industrial refrigeration, building automation, and scient ific equipment services. We are going to upload about 10gb of corporate files. You will fi nd passports and DLs of a few dozens of employees, financial and accounting information (payment details, employee financial infor mation, budgets, reports and so on), confidential files, agreemen ts and contracts, etc. ID 21903
Ransomware	Blazer Building id21882 View details	2025-08-21	United Kingdom	Construction / Real Estate	—	pending
Blazer Building is a general construction company that specialize s in the expedited delivery of high-quality apartment homes. We are going to upload about 10gb of corporate files. You will fi nd employees information (DOB, addresses, SSNs, phones, even pets names and so on), HR files, detailed financial and accounting in formation (customers files), agreements and contracts, employee f inancial information, violation reports, police reports, etc. ID 21882
Ransomware	Burt Process Equipment id21881 View details	2025-08-21	United States	Communication / Marketing	—	pending
Burt Process Equipment is a leader in the worldwide community of people, businesses, and organizations striving to create a better environment through the innovative and responsible use of water and natural resources. We are going to upload about 19gb of corporate files. You will fi nd employees information (DOB, addresses, SSNs, phones, emails an d so on), HR files, detailed financial and accounting information (customers files, employee financial information, payment detail s), lots of scanned docs with personal data, agreements and contr acts, NDAs, etc. ID 21881
Ransomware	RA Services id21859 View details	2025-08-20	United States	Services	—	pending
RA Services offer a comprehensive line of medical business soluti ons to help your practice or healthcare facility achieve its fina ncial and strategic goals. We are ready to upload more than 15GB files of essential corporat e documents such as: financial data (audit, payment details,finan cial reports, invoices), employees and customers information ( de ath certificate, passports,credit cards, medical information) A b it of personal files and customers data. ID 21859
Ransomware	Steel Encounters id21858 View details	2025-08-20	United States	Manufacturing / Engineering	—	pending
Steel Encounters is a commercial specialty subcontractor who prov ides steel joist and metal deck products and services, glazing, c urtain wall, and architectural cladding systems to general contra ctors, architects, and building owners. We are ready to upload more than 21GB files of essential corporat e documents such as: financial data (audit, payment details,finan cial reports, invoices), employees and customers information (pas sports, death/birth certificate, medical information, emails, pho nes) confidential information and other documents with detailed p ersonal information so on. ID 21858
Ransomware	LandWorks id21857 View details	2025-08-20	United States	Finance / Legal / Insurance	—	leaked
Landworks landscape & lawn care company. Providing Residential & Commercial services since 1995 to Johnson County & greater Kansas City area. We are ready to upload more than 30GB files of essential corporat e documents such as: financial data (audit, payment details, invo ices), employees and customers information (Social Security Numbe rs, phones, medical information) confidential information and oth er documents with detailed personal information and so on. ID 21857
Ransomware	RAVEN Mechanical id21856 View details	2025-08-20	United States	Finance / Legal / Insurance	—	leaked
Raven Mechanical is a family owned and operated commercial specia lty construction company specializing in plumbing, HVAC, utility and specialty piping projects. We are going to upload company data soon. You will find financial data (audit, payment details,financial reports, invoices), emplo yees and customers information (passports, driver's licenses, SSC s, birth certificates ) and other confidential information, NDAs and documents with detailed personal information. ID 21856
Ransomware	Advanced Blending Solutions id21855 View details	2025-08-20	United States	Finance / Legal / Insurance	—	pending
Advanced Blending Solutions is a leading designer, manufacturer, and supplier of blending and material convey equipment tailored f or the plastics industry. We are going to upload about 352gb ( 10gb of SQL databases) of co rporate files. You will find detailed employees information (DOB, DL numbers, addresses, SSNs, phones, and so on), HR files, detai led financial and accounting information, lost of agreements and contracts, credit card details, scans of documents with detailed personal information, customer financial and other information, e tc. ID 21855
Ransomware	NC Dynamics LLC id21854 View details	2025-08-20	United States	Finance / Legal / Insurance	—	pending
NC Dynamics LLC is a full-service manufacturing facility speciali zing in high-speed machining, including 3, 4, and 5 axis milling, CNC turning, and assembly. We are going to upload about 30gb of corporate files. You will fi nd employees informration (DOB, email addresses, addresses, SSNs, phones, and so on), HR files, detailed financial and accounting information, payment details, lost of agreements and contracts, c redit card details, scans of documents with detailed personal inf ormation, employee financial information, lots of drawings, NDAs, etc. ID 21854
Ransomware	Bobcat Central id21834 View details	2025-08-19	United States	Finance / Legal / Insurance	—	leaked
Bobcat Central, Inc. began operations in Stockton in 1976. The co mpany is an equipment dealer offering parts, service, rental, and sales of Bobcat equipment, attachments, Doosan heavy equipment, Tigercat, and Towmaster trailers. We are ready to upload more than 12GB files of essential corporat e documents such as: financial data (audit, payment details,finan cial reports, invoices), employees and customers information (dri ver's license, Social Security Numbers, medical information) conf idential information, NDAs and other documents with detailed pers onal information . ID 21834
Ransomware	Electro-Tech id21833 View details	2025-08-19	United States	IT	—	leaked
ElectroTech, Incorporated is a manufacturers representative for e lectrical products. We are going to upload company data soon. You will find financial data (audit, payment details,financial reports, invoices), NDAs and other documents with detailed personal information and so on. ID 21833
Ransomware	Rare Editions id21832 View details	2025-08-19	United States	Communication / Marketing	—	leaked
Rare Editions has been making dresses for girls for over fifty ye ars. Their line consists of dresses for special occasions, includ ing birthday dresses, christening dresses, and flower girl dresse s. We are going to upload company data soon. You will find financial data , employees and customers information. Lots of projects inf ormation with samples of their products and other details. ID 21832
Ransomware	Hytrol id21773 View details	2025-08-16	United States	Finance / Legal / Insurance	—	pending
Hytrol Conveyor Company, Inc. was founded in 1947. The Company's line of business includes manufacturing conveyors and conveying e quipment. The company is headquartered in Jonesboro, Arkansas We are ready to upload more than 20GB files of essential corporat e documents such as: financial data (audit, payment details,finan cial reports, invoices), employees and customers (and even relati ves) information (Social Security Card, death certificate, medica l information) and other documents with detailed personal informa tion so on. ID 21773
Ransomware	ZMM id21751 View details	2025-08-15	United States	Finance / Legal / Insurance	—	pending
ZMM Architects and Engineers is an award-winning design firm with offices in West Virginia, Virginia, and Ohio, providing integrat ed professional services. They specialize in various sectors incl uding education, healthcare, government, and commercial spaces, e mploying a holistic approach to building design that encompasses architecture, engineering, and sustainable design. We are ready to upload more than 50GB files of essential corporat e documents such as: financial data (audit, payment details,finan cial reports), employees and customers information, confidential informationand other documents with detailed personal information so on. You will also find such court hearings and other legal co nfidential docs. ID 21751
Ransomware	Ranshu, Meridian Auto Parts, Visionaire,Omega enviromenta technologies, Ap Air id21737 View details	2025-08-14	United States	Manufacturing / Engineering	—	pending
We are going to upload about 47 gb of a bunch of companies. All o f them are auto parts related. You will find detailed employees i nformation (DOB, DL numbers and so on), HR files, financial and a ccounting information, lost of agreements and contracts, drawings , specifications, corporate credit card details, scans of documen ts with detailed personal information, customer data and so on. ID 21737
Ransomware	Erdy McHenry Architecture id21736 View details	2025-08-14	United States	Construction / Real Estate	—	leaked
Erdy McHenry Architecture specializes in a diverse range of archi tectural services, including academic, cultural, agricultural inf rastructure, commercial, housing, and health science projects. We are ready to upload more than 26GB files of essential corporat e documents such as: financial data (payment details, invoices), employees information. A bit of personal files and customers data . ID 21736
Ransomware	Lundberg Design id21732 View details	2025-08-14	United States	Finance / Legal / Insurance	—	pending
Lundberg Design specializes in a diverse range of architectural p rojects including residential, commercial, and public spaces. The y offer services that encompass design for restaurants, hotels, r etail spaces, and other urban and rural developments. We are ready to upload more than 91GB files of essential corporat e documents such as: financial data (audit, payment details,finan cial reports, invoices), employees and customers information (pas sports, driver's license) confidential information, NDAs and othe r documents with detailed personal information so on. ID 21732
Ransomware	Rusin Law id21731 View details	2025-08-14	United States	Finance / Legal / Insurance	—	leaked
Rusin Law is a premier civil litigation defense firm specializing in workers' compensation cases. Their services encompass a wide array of legal disciplines, including civil litigation, insurance defense, employment law, and more. We are ready to upload more than 134GB files of essential corpora te documents such as: financial data (audit, payment details,fina ncial reports, invoices), employees and customers information (bi rth certificate,medical information) and other documents containi ng confidential information. You will also find such documents as police protocols, court hearings and other legal confidential do cs. ID 21731
Ransomware	FranceLink id21718 View details	2025-08-13	France	Finance / Legal / Insurance	—	pending
Francelink is a company specializing in website creation, hosting , and digital transition support. We are going to upload 20 GB of financial files. ID 21718
Ransomware	Cevital id21717 View details	2025-08-13	Algeria	Finance / Legal / Insurance	—	leaked
Founded in 1998 and headquartered in Algiers, Algeria, Cevital is a holding company with interests in food-processing and mass dis tribution industry to electronics and domestic appliances, the ir on and steel industry, the flat glass industry, industrial constr uction, the automobile industry, services, and the media. We are going to upload company data soon. You will find financial data (audit, invoices), project details, personal financial deta ils of employees, accounting files. ID 21717
Ransomware	Litchfield Cavo LLP id21715 View details	2025-08-13	United States	Finance / Legal / Insurance	—	pending
Litchfield Cavo LLP is a premier coverage and litigation defense law firm founded in 1998 on one principal - client service comes first. We are ready to upload more than 300GB files of essential corpor ate documents such as: financial data (audit, payment details,fin ancial reports, invoices), employees and customers information (d river's license, Social Security Numbers, death certificate, medi cal information ) confidential information, NDA and so on. A lot of personal files and customer data,also you will find a lot of court documents such as police reports, hearings and so on. ID 21715
Ransomware	Woodside id21676 View details	2025-08-11	United States	Finance / Legal / Insurance	—	pending
Woodside KC supports your plan for total wellness. From intense f itness classes, tennis programs and full service spa. We are going to upload company data soon. You will find financial data (audit, payment details, invoices), A bit of personal files contracts and customers data. ID 21676
Ransomware	Bondtech id21675 View details	2025-08-11	Sweden	IT	—	leaked
Bondtech is a full-service company specializing in the design, en gineering, and manufacturing of autoclave systems for various ind ustries. We are going to upload company data soon. You will find employees and customers information. A bit of personal files and customers data. ID 21675
Ransomware	Wytech Industries id21674 View details	2025-08-11	United States	IT	—	pending
For nearly 50 years, Wytech has been committed to earning its pos ition as the preferred development and manufacturing partner for straight and cut medical wire, complex catheter mandrels, and cor e wires for medical device OEMs and contract manufacturing organi zations (CMOs) as the leading medical wire and precision grinding partner. We are ready to upload more than 42Gb files of essential corporat e documents such as: financial data (audit, payment details, fina ncial reports, invoices), employees and customers information (em ail's, medical information and other documents), confidential inf ormation, NDA and so on. ID 21674
Ransomware	Summer results id21673 View details	2025-08-11	—	Finance / Legal / Insurance	—	pending
In summer 2025 our team managed to crack IT defenses of a large n umber of companies. Data of some of them hasn't been leaked, so w e will just list company names. They are: Sweetener Supply, Auror a Air Products, Safti First, The Law Offices of Hicks & Demps, SP EEDLOGISTIK, TOP Ships, Geotec, Sterling Card Solutions, TRS Indu stries, Microcosm, GWU-Umwelttechnik GmbH. ID 21673
Ransomware	Sweetener Supply id21677 View details	2025-08-11	United States	Other	—	pending
In summer 2025 our team managed to crack IT defenses of a large number of companies. Data of some of them hasn't been leaked, so we will just list company names. ID 21677
Ransomware	Aurora Air Products id21678 View details	2025-08-11	United States	Communication / Marketing	—	pending
In summer 2025 our team managed to crack IT defenses of a large number of companies. Data of some of them hasn't been leaked, so we will just list company names. ID 21678
Ransomware	Safti First id21679 View details	2025-08-11	United States	Other	—	pending
In summer 2025 our team managed to crack IT defenses of a large number of companies. Data of some of them hasn't been leaked, so we will just list company names. ID 21679
Ransomware	The Law Offices of Hicks & Demps id21680 View details	2025-08-11	United States	Finance / Legal / Insurance	—	pending
In summer 2025 our team managed to crack IT defenses of a large number of companies. Data of some of them hasn't been leaked, so we will just list company names. ID 21680
Ransomware	SPEEDLOGISTIK id21681 View details	2025-08-11	Italy	Other	—	pending
In summer 2025 our team managed to crack IT defenses of a large number of companies. Data of some of them hasn't been leaked, so we will just list company names. ID 21681
Ransomware	TOP Ships id21682 View details	2025-08-11	Greece	Other	—	pending
In summer 2025 our team managed to crack IT defenses of a large number of companies. Data of some of them hasn't been leaked, so we will just list company names. ID 21682
Ransomware	Geotec id21683 View details	2025-08-11	Germany	Other	—	pending
In summer 2025 our team managed to crack IT defenses of a large number of companies. Data of some of them hasn't been leaked, so we will just list company names. ID 21683
Ransomware	Sterling Card Solutions id21684 View details	2025-08-11	United States	Services	—	leaked
In summer 2025 our team managed to crack IT defenses of a large number of companies. Data of some of them hasn't been leaked, so we will just list company names. ID 21684
Ransomware	TRS Industries id21685 View details	2025-08-11	United States	Other	—	pending
In summer 2025 our team managed to crack IT defenses of a large number of companies. Data of some of them hasn't been leaked, so we will just list company names. ID 21685
Ransomware	Microcosm id21686 View details	2025-08-11	United Kingdom	Other	—	pending
In summer 2025 our team managed to crack IT defenses of a large number of companies. Data of some of them hasn't been leaked, so we will just list company names. ID 21686
Ransomware	GWU-Umwelttechnik GmbH id21687 View details	2025-08-11	Germany	IT	—	pending
In summer 2025 our team managed to crack IT defenses of a large number of companies. Data of some of them hasn't been leaked, so we will just list company names. ID 21687
Ransomware	ESD id21672 View details	2025-08-11	United States	Finance / Legal / Insurance	—	leaked
ESD Inc. specializes in engineering and manufacturing a diverse r ange of mechanical and electronic payment systems tailored for th e multi-housing and laundromat industries. We are going to upload company data soon. You will find financial data (audit, payment details,financial reports, invoices), emplo yees and customers information (medical information, passports, d river's license ) A bit of personal files and customers data. ID 21672
Ransomware	Architectural DesignWest id21671 View details	2025-08-11	United States	Finance / Legal / Insurance	—	leaked
Design West Architects specializes in architectural design, focus ing on various sectors including educational and residential proj ects. We are ready to upload more than 27GB files of essential corporat e documents such as: financial data ( audit, payment details, inv oices), employees and customers information (telephone numbers, e mail's, medical information,driver's license, DLs and other docum ents), confidential information, NDA and so on. ID 21671
Ransomware	Spring Footwear id21670 View details	2025-08-11	United States	Communication / Marketing	—	leaked
Spring Footwear has dedicated itself to providing consumers with footwear. The company's brands are Spring Step, L'Artiste, Azura, Flexus, Patrizia and Spring Step Professional. We are ready to upload more than 23GB files of essential corporat e documents such as: financial data (audit, payment details, invo ices), employees and customers information (email's,driver's lice nse,Social Security Numbers and other documents), confidential in formation, NDA and so on. ID 21670
Ransomware	The Law Company id21669 View details	2025-08-11	United States	Finance / Legal / Insurance	—	leaked
The Law Company Inc provides commercial construction services for vartious industries including retail, worship, industrial, educa tion, corporate, healthcare, government, lodging, and cultural. We are ready to upload more than 14GB files of essential corporat e documents such as: financial data (audit, payment details, fina ncial reports, invoices), employees and customers information and so on. ID 21669
Ransomware	Anderson Packaging id21668 View details	2025-08-11	United States	Finance / Legal / Insurance	—	leaked
Anderson Packaging, LLC specializes in packaging and assembly ser vices tailored for the aftermarket industry. We are going to upload company data soon. You will find financial data (audit, payment details,financial reports, invoices), emplo yees and customers information, driver's license and a bit of per sonal files and customers data. ID 21668
Ransomware	Atlas Transfer & Storage id21667 View details	2025-08-11	United States	Finance / Legal / Insurance	—	leaked
Atlas Transfer & Storage not only handles residential and commerc ial relocations, but we also provide premier storage solutions. We are going to upload company data soon. You will find financial data (audit, payment details,financial reports, financial report s, invoices), employees and customers information: driver's licen se and a bit of personal files and customers data. ID 21667
Ransomware	Insero & Co. CPAs, LLP id21666 View details	2025-08-11	United States	Finance / Legal / Insurance	—	pending
Insero & Co. CPAs founded in 1973 and headquartered in Rochester, New York, is a premier public accounting firm. We are ready to upload more than 40GB files of essential corporat e documents such as: financial data (audit, payment details,finan cial report, invoices), employees and customers information (pass ports, emails, driver's license and other documents), confidentia l information, NDA and so on. ID 21666
Ransomware	MGM Transformer id21564 View details	2025-08-06	United States	Finance / Legal / Insurance	—	pending
MGM Transformers specializes in manufacturing a wide range of tra nsformers, including medium voltage dry type, oil-filled, and cus tom-designed options, serving various sectors such as data center s, renewables, commercial industrial, and utilities We are ready to upload more than 60GB files of essential corporat e documents such as: financial data (audits, payment details, fin ancial reports, invoices), employees and customers information (m edical information, passports, driver's license, SSNs, DLs and ot her documents), confidential information, NDA and so on. ID 21564
Ransomware	Meissner Fenstertechnik id21488 View details	2025-08-01	Germany	IT	—	pending
Meissner Fenstertechnik creates solutions for building components . Innovative technologies for windows and doors. We are ready to upload 20 GB of corporate documents. A lot of emp loyees personal documents, project details, financials, customers information, contracts and agreements, NDAs, etc. ID 21488
Ransomware	Hölscher Holding id21486 View details	2025-08-01	Germany	Communication / Marketing	—	leaked
Hölscher Holding specializes in consulting, planning, and impleme nting storage and logistics systems, making it a leading provider in Europe. We are ready to upload 24 GB of corporate documents. Top manageme nt and other employees (including foreigners) personal documents, customer information (DOB, address and so on), detailed financia ls, project data, customers information, contracts and agreements BMW, Ford, MAN, Mercedes and other big names, NDAs, etc. ID 21486
Ransomware	Herrman Law Firm id21485 View details	2025-08-01	United States	Finance / Legal / Insurance	—	leaked
Herrman Law LLC, led by attorney Lynnette Herrman, specializes in family law representation, offering aggressive and client-focuse d legal services. We are ready to upload more than 168GB files of essential corpora te documents such as: financial data (audits, payment details, fi nancial reports, invoices), employees and customers information ( credit cards, medical information, passports, SSNs, DLs and other documents), also you will find a lot of court documents such as police reports, hearings and so on. ID 21485
Ransomware	Guyana Sugar id21484 View details	2025-08-01	Guyana	Communication / Marketing	—	pending
Guyana Sugar Corporation has been hacked. The company was founded in 1976 and is headquartered in Guyana, provides cultivation of sugar cane and the production of sugar. We will provide the detai ls shortly. ID 21484
Ransomware	Great Lakes Carpet &Tile id21483 View details	2025-08-01	United States	Finance / Legal / Insurance	—	leaked
Founded in 1991 and headquartered in Wildwood, Florida, Great Lak es Carpet & Tile is a distributor of flooring products offering a variety of brands. We are ready to upload more than 100GB/82794 files of essential c orporate documents such as: financial data (audits, payment deta ils,financial reports, invoices), employees and customers informa tion (phones, e-mails, addresses, credit cards, medical informati on, confidential, passports, SSNs, DLs and other documents), etc. ID 21483
Ransomware	Druni id21416 View details	2025-07-29	Spain	Communication / Marketing	—	leaked
DRUNI offers a wide range of online beauty products including per fumes, makeup, and cosmetics at competitive prices. We are ready to upload over 40 GB of corporate documents. Employe e files like DNI and so on, detailed financials, project data, cu stomers information, contracts and agreements with L'oreal, Dior, Channel and others big names. ID 21416
Ransomware	Hertz Farm Management id21415 View details	2025-07-29	United States	Agriculture / Food	—	leaked
Hertz Farm Management specializes in professional farm management , land real estate services, and agricultural appraisals. We are going to upload 9 GB of corporate documents. A huge number of employee personal files (passports, DLs, birth certs and so o n), NDAs, detailed financial data, client information, project in formation and so on. ID 21415
Ransomware	Mount Vernon Property Management id21414 View details	2025-07-29	United States	Construction / Real Estate	—	leaked
Mount Vernon Property Management specializes in property managem ent services in Sarasota, offering tailored full-service solution s for landlords and investors. We are going to upload company data soon. You will find inancial data (payment details, financial reports, invoices), A bit of per sonal files (DLs) and customers data. ID 21414
Ransomware	Blanco Creek Farms id21397 View details	2025-07-28	United States	Agriculture / Food	—	leaked
Blanco creek farms is a food & beverages company based out of Uni ted States. We are ready to upload more than 24GB of essential corporate docu ments such as: financial data (audits, payment details, invoices ), employees and customers information (phones, e-mails, addresse s, passports, SSNs, DLs and other documents), NDA etc. ID 21397
Ransomware	Dunlap Codding id21368 View details	2025-07-25	United States	Finance / Legal / Insurance	—	pending
Dunlap Codding is a law firm, based in Oklahoma City, serves soph isticated international, national, and regional clients. We are ready to upload over 19 GB of corporate documents. Lots of client personal files, financial documents, project data, lots o f patent documents, courts files, hearing notes, protocols, etc. ID 21368
Ransomware	Helical Auto Technology (India) id21366 View details	2025-07-25	India	IT	—	leaked
Helical Technology has been established for over 50 years and has a global presence with production facilities in the UK, India an d China. The company designs and manufactures springs, valve rota tors, actuators and so on. We are ready to upload over 17 GB of corporate documents. Financi al documents, HR files (employee docs), project data, NDAs, custo mer information, data of the UK departments, etc. ID 21366
Ransomware	Donlar Construction id21348 View details	2025-07-24	United States	Construction / Real Estate	—	leaked
Donlar Construction is a full-service construction organization t hat offers Minnesota and the Upper Midwest unparalleled service a s a General Contractor & Construction Manager. We are ready to upload almost 50 GB of corporate documents. Emplo yees personal information (DOB, address, phone, emails, medical i nformation and so on), detailed financial data, project data, inc ident reports, NDAs, etc. ID 21348
Ransomware	Testa Heck Testa & White id21347 View details	2025-07-24	United States	Finance / Legal / Insurance	—	pending
Testa Heck Scrocca & Testa, P.A. is a Southern New Jersey law fir m with over 90 years of combined experience and an outstanding re cord of success in the New Jersey Courts. We are ready to upload 87 GB of corporate documents. You will fin d a lot of personal information of their clients (DLs, birth\deat h certs and other documents), court documents, orders, correspond ence and a lot of another legal documents. ID 21347
Ransomware	Pilipili id21346 View details	2025-07-24	Belgium	Communication / Marketing	—	leaked
Pilipili is a full service partner in product design & engineerin g. We are ready to upload 9 GB of corporate documents. Lots of clien t data, contracts and agreements and so on. ID 21346
Ransomware	OKA id21338 View details	2025-07-23	Japan	Communication / Marketing	—	pending
OKA offers an entire range of products for the home, including so fas, upholstered furniture, dining tables and chairs, curtains, s torage, beds, headboards and linen, rugs, lighting and more. We are ready to upload 7 GB of corporate documents. Employee pers onal files, project data, client data, credit cards, detailed fin ancial data, NDAs, contracts and agreements, etc. ID 21338
Ransomware	Reimo id21337 View details	2025-07-23	Germany	Finance / Legal / Insurance	—	leaked
REIMO is one of Europe's leading camper van manufacturers and acc essories traders. We are ready to upload 53 GB of corporate documents. Employee per sonal information, project data, client data, financial data, NDA s, etc. ID 21337
Ransomware	Pinnacle Woodwork id21314 View details	2025-07-22	Canada	Finance / Legal / Insurance	—	leaked
Pinnacle Woodwork is a store fixture manufacturer located in Germ antown, WI. We are ready to upload 24 GB of corporate documents. NDAs, client data, financial data, complete employee data (DOB, address, phon es, family members contacts). ID 21314
Ransomware	Sogedis id21310 View details	2025-07-22	France	Finance / Legal / Insurance	—	pending
Sogedis is a French company operating in the field of household a ppliances. We are ready to upload 10 GB of corporate documents. Client data, personal documents of employees, financial data, agreements with big names as Siemens, Whirlpool, Samsung, Electrolux, Indesit, B osch and so on. ID 21310
Ransomware	Studio Associato Callatroni Bianchi id21275 View details	2025-07-21	Italy	Services	—	pending
STUDIO_C - IT Consulting and Services. We are going to upload company data soon. Accounting and financia l data, client data, etc. ID 21275
Ransomware	Polykar id21232 View details	2025-07-18	Canada	Communication / Marketing	—	leaked
Polykar is an innovative manufacturer of sustainable flexible pac kaging solutions, offering products that are 100% recyclable or c ompostable. We are ready to upload 16 GB of corporate documents. Detailed fin ancial data, client data, payment details, forms with personal in formation and so on. ID 21232
Ransomware	LeasePLUS id21231 View details	2025-07-18	Australia	Communication / Marketing	—	pending
LeasePLUS is one of Australia’s leading providers of novated leas ing solutions, focused on helping individuals save thousands thro ugh salary packaging for vehicles. We are ready to upload 6 GB of corporate documents. Personal file s of more than 2300 people (customers and employees), NDAs, contr acts and agreements, etc. ID 21231
Ransomware	Souleret Engineering(LSSE) id21227 View details	2025-07-18	United States	Manufacturing / Engineering	—	pending
Lennon, Smith, Souleret Engineering, Inc. is a civil engineering and surveying company, serving various markets including municipa l, commercial, industrial, residential, utilities, and energy sec tors. We are ready to upload more than 14 GB of corporate documents. Lo ts of contracts and agreements, documents with personal informati on, project documents, financial files, etc. ID 21227
Ransomware	Sib-Tryck Holding id21223 View details	2025-07-17	Sweden	Communication / Marketing	—	pending
Sib Tryck is a firm that operates in digital printing. They provi de anything from business cards to complex solutions such as cust omized packaging and delivery. We are going to upload 45 GB of corporate documents. Clients and employee information, project data, agreements, and so on. ID 21223
Ransomware	Fayrefield Foods id21222 View details	2025-07-17	United Kingdom	Agriculture / Food	—	leaked
Fayrefield Foods specializes in the production and marketing of d airy products and powders throughout Europe, the Middle East, and North America. We are ready to upload more than 41 GB of essential corporate doc uments. Scans of almost all employees and other personal document s, detailed financial files, client information, NDAs, contracts and agreements, etc. ID 21222

‹ Prev 1 … 5 6 7 8 9 10 11 … 17 Next ›

Akira

Overview

Leak Status Distribution

Top Countries

Known Leak Locations (2)

Top Activity Sectors (18)

Typical Attacks (29)

Tools Observed (41)

Credential theft

Defense evasion

Discovery

Discovery & enumeration

Exfiltration

Networking & tunnelling

OffSec

Offensive security tooling

RMM Tools

Remote monitoring & management

Crypto Wallets (15)

Ransom Notes (3)

Victims (1670)

Restricted Access

Now you can see the leak, not just the listing