Ransomware Group intelligence

Akira

Active

Track Akira with 1676 published victims and 2 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS

Want an alert every time a new ransomware post is published?

Choose the feeds and the countries you care about — we email you when they move.

Victims 1676 Known published victims in this dataset

First discovered 2023-04-26 Earliest victim discovery date

Last discovered 2026-09-04 Latest victim discovery date

Inactive since 2 days Days since the latest known victim

Top country United States 916 victims

Known locations 2 Leak or negotiation infrastructure tracked

Akira is tracked by Breach House as a ransomware group with 1676 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Top Countries

Distribution

Label	Type	Availability	Links
Leak location 2	Onion service	Down checked 20m ago	`akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion`
Leak location 1	Onion service	Down checked 21m ago	`akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion`

Finance / Legal / Insurance 426
Communication / Marketing 320
Manufacturing / Engineering 170
Services 128
Construction / Real Estate 105
Not identified 75
Healthcare / Pharma 66
IT 64
Energy 39
Hospitality / Food & Beverage / Tourism 32
Transportation / Travel / Logistics 32
Agriculture / Food 31
Retail / E-commerce 27
Telecommunications 27
Education 25
Public Sector 16
NGOs / Associations 5
null 1

Typical Attacks (29)

▼

How Akira typically operates, as attributed by MITRE ATT&CK v19.2. Attributed via Akira, Akira, Akira _v2.

T1078 Valid Accounts Initial AccessPersistencePrivilege EscalationStealth

What they do: Akira uses valid account information to remotely access victim networks, such as VPN credentials.

What that means: Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
T1133 External Remote Services Initial AccessPersistence

What they do: Akira uses compromised VPN accounts for initial access to victim networks.

What that means: Adversaries may leverage external-facing remote services to initially access and/or persist within a network.
T1047 Windows Management Instrumentation Execution

What they do: Akira will leverage COM objects accessed through WMI during execution to evade detection.

What that means: Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads.
T1059.001 PowerShell Execution

What they do: Akira has used PowerShell scripts for credential harvesting and privilege escalation.

What that means: Adversaries may abuse PowerShell commands and scripts for execution.
T1059.003 Windows Command Shell Execution

What they do: Akira executes from the Windows command line and can take various arguments for execution.

What that means: Adversaries may abuse the Windows command shell for execution.
T1106 Native API Execution

What they do: Akira executes native Windows functions such as GetFileAttributesW and `GetSystemInfo`.

What that means: Adversaries may interact with the native OS application programming interface (API) to execute behaviors.
T1543 Create or Modify System Process PersistencePrivilege Escalation

What they do: Akira _v2 can create a child process for encryption.

What that means: Adversaries may create or modify system-level processes to repeatedly execute malicious payloads as part of persistence.
T1027.001 Binary Padding Stealth

What they do: Akira has used binary padding to obfuscate payloads.

What that means: Adversaries may use binary padding to add junk data and change the on-disk representation of malware.
T1036.005 Match Legitimate Resource Name or Location Stealth

What they do: Akira has used legitimate names and locations for files to evade defenses.

What that means: Adversaries may match or approximate the name or location of legitimate files, Registry keys, or other resources when naming/placing them.
T1480 Execution Guardrails Stealth

What they do: Akira _v2 will fail to execute if the targeted `/vmfs/volumes/` path does not exist or is not defined.

What that means: Adversaries may use execution guardrails to constrain execution or actions based on adversary supplied and environment specific conditions that are expected to be present on the target.
T1685 Disable or Modify Tools Defense Impairment

What they do: Akira has disabled or modified security tools for defense evasion.

What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
T1558 Steal or Forge Kerberos Tickets Credential Access

What they do: Akira have used scripts to dump Kerberos authentication credentials.

What that means: Adversaries may attempt to subvert Kerberos authentication by stealing or forging Kerberos tickets to enable Pass the Ticket.
T1018 Remote System Discovery Discovery

What they do: Akira uses software such as Advanced IP Scanner and MASSCAN to identify remote hosts within victim networks.

What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
T1057 Process Discovery Discovery

What they do: Akira verifies the deletion of volume shadow copies by checking for the existence of the process ID related to the process created to delete these items.

What that means: Adversaries may attempt to get information about running processes on a system.
T1082 System Information Discovery Discovery

What they do: Akira uses the GetSystemInfo Windows function to determine the number of processors on a victim machine.

What that means: An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
T1083 File and Directory Discovery Discovery

What they do: Akira examines files prior to encryption to determine if they meet requirements for encryption and can be encrypted by the ransomware.

What that means: Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
T1135 Network Share Discovery Discovery

What they do: Akira can identify remote file shares for encryption.

What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
T1482 Domain Trust Discovery Discovery

What they do: Akira uses the built-in Nltest utility or tools such as AdFind to enumerate Active Directory trusts in victim environments.

What that means: Adversaries may attempt to gather information on domain trust relationships that may be used to identify lateral movement opportunities in Windows multi-domain/forest environments.
T1654 Log Enumeration Discovery

What they do: Akira _v2 can enumerate the trace, debug, error, info, and warning logs on targeted systems.

What that means: Adversaries may enumerate system and service logs to find useful data.
T1021.001 Remote Desktop Protocol Lateral Movement

What they do: Akira has used RDP for lateral movement.

What that means: Adversaries may use Valid Accounts to log into a computer using the Remote Desktop Protocol (RDP).
T1213.002 Sharepoint Collection

What they do: Akira has accessed and downloaded information stored in SharePoint instances as part of data gathering and exfiltration activity.

What that means: Adversaries may leverage the SharePoint repository as a source to mine valuable information.
T1560.001 Archive via Utility Collection

What they do: Akira uses utilities such as WinRAR to archive data prior to exfiltration.

What that means: Adversaries may use utilities to compress and/or encrypt collected data prior to exfiltration.
T1219 Remote Access Tools Command and Control

What they do: Akira uses legitimate utilities such as AnyDesk and PuTTy for maintaining remote access to victim environments.

What that means: An adversary may use legitimate remote access tools to establish an interactive command and control channel within a network.
T1567.002 Exfiltration to Cloud Storage Exfiltration

What they do: Akira will exfiltrate victim data using applications such as Rclone.

What that means: Adversaries may exfiltrate data to a cloud storage service rather than over their primary command and control channel.
T1486 Data Encrypted for Impact Impact

What they do: Akira encrypts files in victim environments as part of ransomware operations.

What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
T1489 Service Stop Impact

What they do: Akira _v2 can stop running virtual machines.

What that means: Adversaries may stop or disable services on a system to render those services unavailable to legitimate users.
T1490 Inhibit System Recovery Impact

What they do: Akira will delete system volume shadow copies via PowerShell commands.

What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
T1531 Account Access Removal Impact

What they do: Akira deletes administrator accounts in victim networks prior to encryption.

What that means: Adversaries may interrupt availability of system and network resources by inhibiting access to accounts utilized by legitimate users.
T1657 Financial Theft Impact

What they do: Akira engages in double-extortion ransomware, exfiltrating files then encrypting them, in order to prompt victims to pay a ransom.

What that means: Adversaries may steal monetary resources from targets through extortion, social engineering, technical theft, or other methods aimed at their own financial gain at the expense of the availability of these resources for victims.

Tools Observed (41)

▼

Software Akira has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.

Credential theft

DonPAPI LaZagne Mimikatz

Defense evasion

PowerTool Zemana Anti-Rootkit driver Zemana Anti-Rootkit

Discovery

Advanced IP Scanner Masscan ReconFTW SharpHound SoftPerfect NetScan

Discovery & enumeration

Advanced IP Scanner Bloodhound ldapdomaindump Masscan ReconFTW SharpHound SharpShares SoftPerfect NetScan

Exfiltration

FileZilla MEGA RClone Temp[.]sh WinSCP

Networking & tunnelling

Cloudflared OpenSSH Ngrok

OffSec

Impacket

Offensive security tooling

CrackMapExec Impacket NetExec

RMM Tools

AnyDesk MobaXterm Radmin RustDesk

Remote monitoring & management

AnyDesk MeshAgent MobaXterm Radmin RustDesk TeamViewer

Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.

Crypto Wallets (15)

▼

$3,991,216 Received (USD)

24 Payments

15 Known wallets

$997,459 Largest single payment

2023-07-13 → 2024-09-17 Payment window

bitcoin · 15

Address	Chain	Received (USD)	Payments
`bc1qr0pqfghr9cksfc5arr2rak3lt2y50v03pc76nh`	bitcoin	$997,461	2
`bc1qfdzu6uv2nek524pe7lz4w0mxtt9898vfaegdaj`	bitcoin	$482,181	1
`bc1q0dx45y82r5rt36sm38jv0k4dexwc4nj9z4ryw7`	bitcoin	$446,073	2
`bc1q9wnp6k7xxdqkdv4fa5ceyhv08espuskhu8ghq2`	bitcoin	$351,883	1
`bc1qknumj4326runqxfr58kg0s7v7gu9y5v5t9uv6h`	bitcoin	$298,537	2
`bc1qr0txunr259we37wer7w6et33qyq0n6hv83pw24`	bitcoin	$252,389	1
`bc1q0lwpz2yufw3x9as6f679lwk8jx43g44683x5mc`	bitcoin	$229,395	4
`bc1qhzd63mz9mfucak7yzfn65p6rcsgztnsqr3dak8`	bitcoin	$150,205	1
`bc1qqrsd02sqthm8gej8lfesgpx82saw7q2g5pjtah`	bitcoin	$149,891	1
`bc1q4my6vqq8cg689drf9jccqudjclv67sz4cudkyd`	bitcoin	$139,534	1
`bc1qpwwtck0zhzrj56fxeayz6wz5546nlp607qzpvh`	bitcoin	$109,655	2
`bc1qghj85gz0dkr9jeucana3z4xu50ujtllj50rvj0`	bitcoin	$106,115	2

+3 more wallets not shown (the 12 largest by amount received are listed).

Crowdsourced payment data from Ransomwhere, licensed CC BY 4.0. Figures are what has been reported and attributed to this family, not a confirmed total. Cite as: Cable, Jack. (2024). Ransomwhere: A Crowdsourced Ransomware Payment Dataset (1.1.0) [Data set]. Zenodo. https://doi.org/10.5281/zenodo.6512122

Ransom Notes (3)

▼

The note this group leaves on a compromised machine. Click a filename to read it.

akira_readme_3.txt txt · 3485 chars

Hi friends,

Whatever who you are and what your title is, if you're reading this it means the internal infrastructure of your company is fully or partially dead, all your backups - virtual, physical - everything that we managed to reach - are completely removed. Moreover, we have taken a great amount of your corporate data prior to encryption.

ATTENTION! Strictly prohibited:

- Deleting files with .arika extension;

- Replacing or renaming .arika and .akira files;

- Using third party software to recover your systems.

If you violate these rules, we cannot guarantee a successful recovery.

Well, for now let's keep all the tears and resentment to ourselves and try to build a constructive dialogue. We're fully aware of what damage we caused by locking your internal sources. At the moment, you have to know:

1. Dealing with us you will save A LOT due to we are not interested in ruining you financially. We will study in depth your finance, bank & income statements, your savings, investments etc. and present our reasonable demand to you. If you have an active cyber insurance, let us know and we will guide you how to properly use it. Also, dragging out the negotiation process will lead to failing of the deal.

2. Paying us you save your TIME, MONEY, EFFORTS and be back on track within 24 hours approximately. Our decryptor works properly on any files or systems, so you will be able to check it by requesting a test decryption service from the beginning of our conversation. If you decide to recover on your own, keep in mind that you can permanently lose access to some files or accidentally corrupt them - in this case we won't be able to help.

3. The security report or the exclusive first-hand information that you will receive upon reaching an agreement is of great value, since NO full audit of your network will show you the vulnerabilities that we've managed to detect and use in order to get into, identify backup solutions and download your data.

4. As for your data, if we fail to agree, we will try to sell personal information/trade secrets/databases/source codes - generally speaking, everything that has a value on the darkmarket - to multiple threat actors at once. Then all of this will be published in our blog - akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad[.]onion.

5. We're more than negotiable and will definitely find a way to settle this quickly and reach an agreement which will satisfy both of us.

6. Negotiations with Akira can only be conducted in a chat room, which you can access using the login details provided below or in the notes (a readme.txt file) in your systems. You should ignore any attempts (such as emails/social media messages, phone calls, etc.) to redirect you to another chat or email address (proton.me is often used by unauthorized individuals) on our behalf.

7. Be careful while working with recovery agencies as they often try to use your cyber incident to stuff their pockets. There are many risks for you to lose money and get nothing in return.

If you're indeed interested in our assistance and the services we provide you can reach out to us following simple instructions:

1. Install TOR Browser to get access to our chat room - torproject[.]org/download/.

2. Paste this link - https://akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion/d/[snip] .

3. Use this code - [snip] - to log into our chat.

Keep in mind that the faster you will get in touch, the less damage we cause.

View on RansomLook

akira_readme_2.txt txt · 2908 chars

Hi friends,

ATTENTION! Strictly prohibited:

- Deleting files with .arika extension;

- Replacing or renaming .arika and .akira files;

- Using third party software to recover your systems.

If you violate these rules, we cannot guarantee a successful recovery.

5. We're more than negotiable and will definitely find a way to settle this quickly and reach an agreement which will satisfy both of us.

If you're indeed interested in our assistance and the services we provide you can reach out to us following simple instructions:

1. Install TOR Browser to get access to our chat room - torproject[.]org/download/.

2. Paste this link - https://akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion/d/[snip] .

3. Use this code - [snip] - to log into our chat.

Keep in mind that the faster you will get in touch, the less damage we cause.

View on RansomLook

akira_readme.txt txt · 2662 chars

Hi friends,

Whatever who you are and what your title is if you're reading this it means the internal infrastructure of your company is fully or partially dead, all your backups - virtual, physical - everything that we managed to reach - are completely removed. Moreover, we have taken a great amount of your corporate data prior to encryption.

1. Dealing with us you will save A LOT due to we are not interested in ruining your financially. We will study in depth your finance, bank & income statements, your savings, investments etc. and present our reasonable demand to you. If you have an active cyber insurance, let us know and we will guide you how to properly use it. Also, dragging out the negotiation process will lead to failing of a deal.

2. Paying us you save your TIME, MONEY, EFFORTS and be back on track within 24 hours approximately. Our decryptor works properly on any files or systems, so you will be able to check it by requesting a test decryption service from the beginning of our conversation. If you decide to recover on your own, keep in mind that you can permanently lose access to some files or accidently corrupt them - in this case we won't be able to help.

3. The security report or the exclusive first-hand information that you will receive upon reaching an agreement is of a great value, since NO full audit of your network will show you the vulnerabilities that we've managed to detect and used in order to get into, identify backup solutions and upload your data.

4. As for your data, if we fail to agree, we will try to sell personal information/trade secrets/databases/source codes - generally speaking, everything that has a value on the darkmarket - to multiple threat actors at ones. Then all of this will be published in our blog - https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion.

5. We're more than negotiable and will definitely find the way to settle this quickly and reach an agreement which will satisfy both of us.

If you're indeed interested in our assistance and the services we provide you can reach out to us following simple instructions:

1. Install TOR Browser to get access to our chat room - https://www.torproject.org/download/.

2. Paste this link - https://akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion.

3. Use this code - [snip] - to log into our chat.

Keep in mind that the faster you will get in touch, the less damage we cause.

View on RansomLook

Ransom-note text from RansomLook, licensed CC BY 4.0.

Victims (1676)

Search, filter and paginate the victim timeline for Akira. Showing 801–900 of 1676.

Type	Target	Discovered	Country	Business Category	Intel Link
Ransomware	Studio Associato Callatroni Bianchi id21275 View details	2025-07-21	Italy	Services	—
STUDIO_C - IT Consulting and Services. We are going to upload company data soon. Accounting and financia l data, client data, etc. ID 21275
Ransomware	Polykar id21232 View details	2025-07-18	Canada	Communication / Marketing	—
Polykar is an innovative manufacturer of sustainable flexible pac kaging solutions, offering products that are 100% recyclable or c ompostable. We are ready to upload 16 GB of corporate documents. Detailed fin ancial data, client data, payment details, forms with personal in formation and so on. ID 21232
Ransomware	LeasePLUS id21231 View details	2025-07-18	Australia	Communication / Marketing	—
LeasePLUS is one of Australia’s leading providers of novated leas ing solutions, focused on helping individuals save thousands thro ugh salary packaging for vehicles. We are ready to upload 6 GB of corporate documents. Personal file s of more than 2300 people (customers and employees), NDAs, contr acts and agreements, etc. ID 21231
Ransomware	Souleret Engineering(LSSE) id21227 View details	2025-07-18	United States	Manufacturing / Engineering	—
Lennon, Smith, Souleret Engineering, Inc. is a civil engineering and surveying company, serving various markets including municipa l, commercial, industrial, residential, utilities, and energy sec tors. We are ready to upload more than 14 GB of corporate documents. Lo ts of contracts and agreements, documents with personal informati on, project documents, financial files, etc. ID 21227
Ransomware	Sib-Tryck Holding id21223 View details	2025-07-17	Sweden	Communication / Marketing	—
Sib Tryck is a firm that operates in digital printing. They provi de anything from business cards to complex solutions such as cust omized packaging and delivery. We are going to upload 45 GB of corporate documents. Clients and employee information, project data, agreements, and so on. ID 21223
Ransomware	Fayrefield Foods id21222 View details	2025-07-17	United Kingdom	Agriculture / Food	—
Fayrefield Foods specializes in the production and marketing of d airy products and powders throughout Europe, the Middle East, and North America. We are ready to upload more than 41 GB of essential corporate doc uments. Scans of almost all employees and other personal document s, detailed financial files, client information, NDAs, contracts and agreements, etc. ID 21222
Ransomware	Multilift Logistic Group id21221 View details	2025-07-17	United States	Finance / Legal / Insurance	—
Multilift International specializes in port operations and termin al warehousing services, handling two million tons annually at th eir facilities. We are ready to upload more than 17 GB of essential corporate doc uments. Complete employee personal information (DOB, identificati on number, passport (scan) and so on), financial files, a lot of client data, a lot of contracts, etc. ID 21221
Ransomware	GreenVest id21220 View details	2025-07-17	United States	Services	—
GreenVest is an environmental development and consulting firm, sp ecializing in ecological restoration, mitigations services and su stainable land planning. We are ready to upload more than 7 GB of corporate documents. Fin ancial data, projects, etc. ID 21220
Ransomware	Goldberg & Osborne id21219 View details	2025-07-17	United States	Communication / Marketing	—
Goldberg & Osborne attorneys provide comprehensive legal services for Plaintiff injury victims. We are ready to upload more than 150 GB of essential corporate do cuments. You will find personal docs of all their clients (more t han 200 ppl), passports, medical records, DLs and so on, financia l data, NDAs, court documents, protocols, etc. ID 21219
Ransomware	Acetificio Andrea Milano id21181 View details	2025-07-16	Italy	Finance / Legal / Insurance	—
Acetificio Andrea Milano is an Italian company with a long histor y in vinegar production. We are ready to upload more than 47 GB of essential corporate doc uments. Personal documents scans of company owners and other empl oyee information, financial data, NDAs, customer information, etc . ID 21181
Ransomware	Title XI id21180 View details	2025-07-16	United States	Services	—
Title XI Software Solutions is a software and support company sup plying secure cloud based case management software as well as ele ctronic discovery and litigation support to bankruptcy trustees, fiduciaries and professionals. We are ready to upload more than 50 GB of essential corporate doc uments. Huge amount of customer personal information (claims, fin ancial statements, passport/DL/ssn scans and so on), employee inf ormation, financial data, court documents, NDAs, etc. ID 21180
Ransomware	PEPRO id21179 View details	2025-07-16	United States	Communication / Marketing	—
PEPRO LLC is a leading manufacturer specializing in patented EMP EMI shielded enclosure systems tailored for mission-critical and remote communication applications. We are ready to upload more than 15 GB of essential corporate doc uments. Employee personal documents, customer information, accoun ting and financial data, agreements and contracts, NDAs, etc. ID 21179
Ransomware	BAF Management Consulting id21164 View details	2025-07-15	Germany	Services	—
BAF Management Consulting. The company provides consulting servic es. We are going to upload company data soon. They claim to process y our data exclusively in accordance with applicable legal regulati ons but failed. Lots of client accounting and financial data, emp loyee information, etc. ID 21164
Ransomware	Studioc id21157 View details	2025-07-15	United States	Services	—
STUDIO_C - IT Consulting and Services. We are going to upload company data soon. Accounting and financia l data, client data, etc. ID 21157
Ransomware	Mazzoleni id21155 View details	2025-07-15	Italy	Finance / Legal / Insurance	—
Mazzoleni Trafilerie Bergamasche is engaged in the drawing, heat treatment and coating of low, medium and high carbon steel wires. We are going to upload company data soon. Lots of agreements, det ailed financial data, confidential files, etc. ID 21155
Ransomware	The Colgin Companies id21154 View details	2025-07-15	United States	Communication / Marketing	—
Colgin offers authentic liquid smoke sauces, bringing the true Te xas smokehouse flavor to its clients. The company provides eight bold flavors including hickory, mesquite, pecan, and apple. We are going to upload company data soon. Clients files, contract s, agreements and so on. ID 21154
Ransomware	McKenzie Commercia id21137 View details	2025-07-14		Communication / Marketing	—
McKenzie Commercial delivers high-quality, cost-effecti ve commercial construction services, while fostering a supportive work environment for employees who provide e xceptional workmanship. Here is the access to 42 GB of corporate data. Employee personal information (DOB, passports, addresses, phone s, emails, and so on), financial data, client data, lot s of project data, contracts and agreements, confidenti al documents, NDAs, etc. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. Open uTorrent, or any another torrent client. Add torrent file or paste the magnet URL to upload the data safely. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:73BDC252B12DA18D0A50F1D54514D0514FB 74AAD&dn=mckenziecommercial.com&tr=udp://tracker.openbi ttorrent.com:80/announce&tr=udp://tracker.opentrackr.or g:1337/announce ID 21137
Ransomware	Genesis Billing Services id21102 View details	2025-07-12	United States	Services	—
Genesis Pathology Billing Service specializes in pathology billin g, offering robust software solutions designed to optimize financ ial outcomes for pathology groups and labs. We are ready to upload 3 GB of corporate documents. Lots of clien ts financial files. ID 21102
Ransomware	Wegley Higginbotham & Associates id21101 View details	2025-07-12	United States	Communication / Marketing	—
Wegley, Higginbotham & Associates PLC is a firm of certified publ ic accountants dedicated to providing superior client service. Th ey offer a variety of professional services and resources aimed a t assisting their valued clients. We are ready to upload 8 GB of essential corporate documents. Cli ents and employees personal files, detailed financial data (payme nt details), NDAs, contracts and agreements, etc. ID 21101
Ransomware	SPANN Roofing & Sheet Metal id21090 View details	2025-07-10	United States	Manufacturing / Engineering	—
Spann Roofing & Sheet Metal is a provider of installation, mainte nance and repair services for commercial, industrial, institution al and residential roofing systems in the eastern sections of Nor th and South Carolina. We are going to upload data of this company. Complete data of all the employees (DOB, SSN, address, phone, email, driver license a nd so on), agreements, detailed financial data, customer data, et c. ID 21090
Ransomware	Tara Pac id21089 View details	2025-07-10	Sweden	Finance / Legal / Insurance	—
Tara Pac is the leading supplier of packaging for food, construct ion, chemistry and cosmetics in the Nordic region. We are ready to upload 6 GB of corporate data. Contacts, agreemen ts, financial data, client data, a bit of employee data. ID 21089
Ransomware	Wispone id21086 View details	2025-07-10	Italy	Telecommunications	—
Wispone's goal is to interconnect broadband and ultra-wideband us ers regardless of geographic location, building a customer-centri c service by overcoming both orographic and conventional circuit limitations. We are ready to upload more than 36 GB of essential corporate doc uments. Lots of client/employees IDs and passports scans, detaile d financial data and numerous agreements, NDAs and so on. ID 21086
Ransomware	Ace Wire Spring & Form id21071 View details	2025-07-09	United States	Communication / Marketing	—
Ace Wire Spring & Form Company, Inc. is a leading spring manufact urer of Compression Springs, Extension Springs, Torsion Springs a nd Wire Forms. We will soon upload corporate data of the company. Lots of employ ees (current and dismissed) files with personal information (addr ess, DOB, SSN, passport), NDAs, detailed financial data, numerous customers contracts and agreements, completed medical forms and so on. ID 21071
Ransomware	Stratascorp Technologies id21070 View details	2025-07-09	United States	IT	—
StratasCorp is a global provider of information technology servic es dedicated to meeting the federal government and defense sector needs for land, sea, air, and space missions. We will soon upload corporate data of the company. There are 200 scans of passports and drive licenses, other documents containin g personal information, NDAs and other contracts and agreements. ID 21070
Ransomware	PennantPark id21014 View details	2025-07-07	United States	Finance / Legal / Insurance	—
PennantPark is an independent middle market credit prov ider specializing in targeted exposure to core middle m arket credit. We are ready to upload more than 6 GB of documents such as: employee documents (SSNs, IDs, passports, DLs, and so on), financial data, confidential reports, client d ata, etc. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. Open uTorrent, or any another torrent client. Add torrent file or paste the magnet URL to upload the data safely. Password: pennantpark.com MAGNET URL: magnet:?xt=urn:btih:8699898E899408169F9FE893112C1ED8A66 0285B&dn=pennantpark.com&tr=udp://tracker.openbittorren t.com:80/announce&tr=udp://tracker.opentrackr.org:1337/ announce ID 21014
Ransomware	Studio VernaSocietà Professionale id21013 View details	2025-07-07	Italy	Communication / Marketing	—
Studio Verna Società Professionale offers integrated ec onomic, tax and legal advice to businesses and third se ctor entities, with a highly personalized approach to t he needs of the client and the sector in which it opera tes. Here is the access to 7 GB of documents such as: financ ial data (audits, payment details, reports, invoices), client financial data, agreements, project information, employee information, etc. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. Open uTorrent, or any another torrent client. Add torrent file or paste the magnet URL to upload the data safely. Password: sleepyhollowcc.org MAGNET URL: magnet:?xt=urn:btih:9632AFDC95E139AA46CE7C2FD7977EFC208 91B24&dn=studioverna.it&tr=udp://tracker.openbittorrent .com:80/announce&tr=udp://tracker.opentrackr.org:1337/a nnounce ID 21013
Ransomware	Corinthian Media id20965 View details	2025-07-04	United States	Communication / Marketing	—
Corinthian Media is a service-driven, results-oriented media buyi ng and planning company. We are ready to upload more than 7 GB of corporate documents. Det ailed financial data, credit card scans, personal documents scans , medical information, NDAs, etc. ID 20965
Ransomware	DKN Hotels id20964 View details	2025-07-04	United States	Hospitality / Food & Beverage / Tourism	—
DKN Hotels is a leading hotel and hospitality management company, offering comprehensive hotel management services. We are ready to upload more than 30 GB of corporate documents. Nu merous financial files, confidentiality agreements, personal docu ments and other personal data (DOB, address, driver license and s o on), lots of project docs, etc. ID 20964
Ransomware	Del Corona &Scardigli Canada id20949 View details	2025-07-03	Canada	Communication / Marketing	—
Del Corona & Scardigli Canada provides a variety of log istics services for all your import, export and triangu lar shipments: air, sea and land transport, warehousing and distribution, etc. Here is the access to 15 GB of corporate data. Employee information (DOB, address, phones and so on), financia l data (audits, payment details, reports), lots of clie nt data, correspondence, contracts and agreements, NDAs , etc. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. Open uTorrent, or any another torrent client. Add torrent file or paste the magnet URL to upload the data safely. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:314DD13DD910EF4D32E93768FE9F4010DF9 3DC3A&dn=dcscanada.com&tr=udp://tracker.openbittorrent. com:80/announce&tr=udp://tracker.opentrackr.org:1337/an nounce ID 20949
Ransomware	Watermark Marine Systems id20919 View details	2025-07-01	United States	Finance / Legal / Insurance	—
Watermark Marine Systems is a full-line marine contractor serving the Lakes Region of New Hampshire since 1990. They offer a compl ete range of shorefront construction services with crews working year-round using mobile equipment to perform work on any of New H ampshire’s lakes or ponds. We are ready to upload more than 10 GB of corporate documents. Em ployee information, confidentiality agreement, financial informat ion (audits, reports, invoices, so on), NDAs, etc. ID 20919
Ransomware	Murex Petroleum id20897 View details	2025-06-30	United States	Energy	—
Murex Petroleum Corporation is engaged in the acquisition, develo pment and operation of oil and gas properties in North America. We are ready to upload 25 GB of documents. Lots of confidential d ocuments, employee information (SSN, DOB, address, passport/SSN/D L scans), detailed financial information (reports, invoices, so o n), NDAs, etc. ID 20897
Ransomware	HRConnects, LLC id20896 View details	2025-06-30	United States	Finance / Legal / Insurance	—
HRConnects, LLC is a leading provider of human resource and staff ing services. We are ready to upload 4 GB of documents. Employee information (S SN, DOB, address, passport/SSN/DL scans). Financial information ( reports, invoices, so on), confidential docs, NDAs, etc. ID 20896
Ransomware	Meleam S.p.A. id20895 View details	2025-06-30	Italy	Finance / Legal / Insurance	—
Meleam S.p.A. offers a comprehensive range of services including risk assessment, training, health surveillance, and various certi fications to ensure compliance with current regulations. We are ready to upload more than 12 GB of documents. Very detaile d financial information (audits, reports, statements, payment det ails and so on), personal information of clients and employees, l ots of contracts and agreements, confidential ones, etc. ID 20895
Ransomware	Martin Showers Smith& McDonald id20843 View details	2025-06-26	United States	Finance / Legal / Insurance	—
Martin, Showers, Smith McDonald, LLC is a law firm specializing i n civil litigation, trial law, personal injury, and family law. We are ready to upload more than 8 GB of documents. More than hal f of the data are scans of client personal documents (passports, SSNs, death/birth certificates, DLs and more), employee informati on, confidential documents, court reports. ID 20843
Ransomware	Imblum Law Offices id20842 View details	2025-06-26	United States	Finance / Legal / Insurance	—
Imblum Law Offices PC specializes in bankruptcy law, offering ser vices such as Chapter 7, Chapter 11, and Chapter 13 bankruptcy fi ling, as well as foreclosure defense and debt relief. We are ready to upload more than 20 GB of documents such as: clie nt personal documents (passports, SSNs, death/birth certificates, financial information), court hearings, protocols, employee info rmation, other confidential documents. ID 20842
Ransomware	MultiStone id20841 View details	2025-06-26	United States	Finance / Legal / Insurance	—
MultiStone is the Low Country's leader in fabrication and install ation of Natural and Engineered stone countertops. We are ready to upload more than 8 GB of documents such as: emplo yee documents, financial data, lots of projects, confidentiality agreements, etc. ID 20841
Ransomware	Studio Verna SocietàProfessionale id20840 View details	2025-06-26	Italy	Communication / Marketing	—
Studio Verna Società Professionale offers integrated economic, ta x and legal advice to businesses and third sector entities, with a highly personalized approach to the needs of the client and the sector in which it operates. We are ready to upload more than 7 GB of documents such as: finan cial data (audits, payment details, reports, invoices), client fi nancial data, agreements, project information, employee informati on, etc. ID 20840
Ransomware	Arbour Volkswagen id20839 View details	2025-06-26	Canada	Finance / Legal / Insurance	—
Throughout the year your Arbour Volkswagen in Laval offers you a large choice of special offers, impressive rebates and unbeatable promotions. We are ready to upload more than 4 GB of documents such as: confi dential agreements containing clients personal information, detai led financial data (audits, payment details, reports, invoices), employee and partners information, etc. ID 20839
Ransomware	Cutcliffe Archetto & Santilli id20825 View details	2025-06-25	United States	Finance / Legal / Insurance	—
Cutcliffe Archetto & Santilli is a prominent law firm b ased in Providence, RI, offering a range of comprehensi ve legal services. Here is the access to 4GB of essential corporate data. You will find a lot of documents with client personal i nformation as DOB, DOD, SSNs, phone, address, emails, c redit cards, medical reports and so on. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. Open uTorrent, or any another torrent client. Add torrent file or paste the magnet URL to upload the data safely. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:1B1781318DD708B8E816F251702CFD59643 875E8&dn=caslawri.com&tr=udp://tracker.openbittorrent.c om:80/announce&tr=udp://tracker.opentrackr.org:1337/ann ounce ID 20825
Ransomware	Pennant Park id20823 View details	2025-06-25	United States	Finance / Legal / Insurance	—
PennantPark is an independent middle market credit provider speci alizing in targeted exposure to core middle market credit. We are ready to upload more than 6 GB of documents such as: emplo yee documents (SSNs, IDs, passports, DLs, and so on), financial d ata, confidential reports, client data, etc. ID 20823
Ransomware	VS Associates id20806 View details	2025-06-24	United States	Finance / Legal / Insurance	—
VS Associates empower their clients to achieve financial confiden ce and security through personalized wealth management, strategic financial planning, and expert investment advice. We are ready to upload more than 30 GB of documents such as: nume rous docs containing personal client information (SSNs, DOB, emai ls, addresses, IDs, financial docs, birth/death certs and so on), financial corporate data (payment details, invoices), NDAs, etc. ID 20806
Ransomware	Datrose id20805 View details	2025-06-24	United States	Services	—
Datrose, founded in is a business outsourcing company that offers document management, mail services, contact center solutions, ac counts payable, and staffing services. We are ready to upload more than 5 GB of corporate documents such as: confidentiality agreements, numerous docs containing persona l employee information (SSNs, DOB, emails, address), financial da ta (payment details, invoices), NDAs, etc. ID 20805
Ransomware	Integrity Mortgage id20803 View details	2025-06-24	United States	Finance / Legal / Insurance	—
Integrity Mortgage operates under the MAC 5 Mortgage umbrella and has an A rating with the Better Business Bureau. We are ready to upload more than 8 GB of essential corporate docu ments such as: detailed personal client data (scans of passports, SSNs, DLs, credit cards and so on), detailed company financial d ata (audits, payment details, reports, invoices), correspondence, etc. ID 20803
Ransomware	Keystone Shipping id20802 View details	2025-06-24	United States	Transportation / Travel / Logistics	—
Keystone is a U.S. shipowner and operator founded in Philadelphia in 1909. We are ready to upload corporate documents such as: personal info rmation of employees (DOB, phone, email and so on), detailed fina ncial data (payment details, reports, invoices, salaries, bonuses ), corporate NDAs, cargo ship blueprints, etc. ID 20802
Ransomware	Sweeney Design id20801 View details	2025-06-24	United States	Communication / Marketing	—
Sweeney is an always open and transparent residential design-buil d remodeling firm that caters to homeowner professionals in Dane County, specifically Madison, Stoughton, Fitchburg, Maple Bluff, McFarland, Middleton, Monona, Oregon, Shorewood Hills, Sun Prairi e, Verona, and Waunakee. We are going to upload about 200(!)MB of corporate data. Just a f ew financial files. ID 20801
Ransomware	Access Financial id20797 View details	2025-06-24	Switzerland	Finance / Legal / Insurance	—
Access Financial is the leading global provider of contract manag ement, outsourced payroll and umbrella services. We are going to upload another 13 GB of corporate data. Confident ial agreements, correspondence, personal documents of employees ( passports, death\birth certificates, other hr files), financials (audits, payment details, reports), NDAs, etc. ID 20797
Ransomware	Seppeler Gruppe id20796 View details	2025-06-24	Germany	Communication / Marketing	—
Die Seppeler Gruppe is a group of internationally producing servi ce companies.. We are going to upload another 11 GB of corporate data. You will find employee personal information (DOB, address, identification numbers and so on), financial data, payment details, project data and so on. ID 20796
Ransomware	Sturdevant'sAuto Parts id20698 View details	2025-06-17	United States	Manufacturing / Engineering	—
Sturdevant's Auto parts is the regions largest automoti ve parts & accessory business with 40 locally owned st ores in SD, ND, Iowa, Minnesota & Nebraska. Here is the access to 16 GB of corporate data. Personal documents, lots of contracts and agreements, client da ta, financial data (audits, payment details, reports), etc. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. Open uTorrent, or any another torrent client. Add torrent file or paste the magnet URL to upload the data safely. Archives have no password. MAGNET URL: magnet:?magnet:?xt=urn:btih:1F9574F57224B33F71BA4170BAA E9366323BBAFF&dn=sturdevants&tr=udp://tracker.openbitto rrent.com:80/announce&tr=udp://tracker.opentrackr.org:1 337/announce ID 20698
Ransomware	HYBRO Saatzucht GmbH& Co KG id20693 View details	2025-06-17	Germany	Finance / Legal / Insurance	—
HYBRO Saatzucht GmbH & Co KG is one of the leading seed breeding companies in the breeding of hybrid and population rye in Germany and Europe. We are going to upload another 3GB of corporate data of another c lient. In the archive there are tons of project documents with cl ient information. Contracts, agreements, financials and so on. ID 20693
Ransomware	Tufton Capital Management id20684 View details	2025-06-16	United States	Services	—
Tufton Capital Management is an independently owned wealth manage ment and investment advisory firm serving high net worth individu als, families and institutions. We are going to upload about 3GB of corporate data. Numerous docs with client personal information as DOB, phone, address, emails are inside. Employee passports, driver licenses and other informa tion can be found as well. Contracts, agreements and so on. ID 20684
Ransomware	Cutcliffe Archetto &Santilli id20682 View details	2025-06-16	United States	Communication / Marketing	—
Cutcliffe Archetto & Santilli is a prominent law firm based in Pr ovidence, RI, offering a range of comprehensive legal services. We are going to upload about 4GB of essential corporate data. You will find a lot of documents with client personal information as DOB, DOD, SSNs, phone, address, emails, credot cards, medical re ports and so on. ID 20682
Ransomware	Ab Ovo id20681 View details	2025-06-16	Netherlands	Communication / Marketing	—
Ab Ovo is an innovative and independent business & software solut ions provider. We are going to upload about 72GB of corporate data. 72Gb of SQLs will be uploaded soon. You will find there client information an d lots of other internal docs. ID 20681
Ransomware	Sweeney id20632 View details	2025-06-12	United States	Communication / Marketing	—
Sweeney is an always open and transparent residential design-buil d remodeling firm that caters to homeowner professionals in Dane County, specifically Madison, Stoughton, Fitchburg, Maple Bluff, McFarland, Middleton, Monona, Oregon, Shorewood Hills, Sun Prairi e, Verona, and Waunakee. We are going to upload about 200(!)GB of corporate data. Just a f ew financial files. ID 20632
Ransomware	Dyrham Park id20619 View details	2025-06-12	United Kingdom	Finance / Legal / Insurance	—
Dyrham Park Country Club is a private members golf and country cl ub in Barnet. We are going to upload about 38GB of corporate data. Lots of docu ments with client (and family members) personal information (DOB, Emails address, address, phone, driver license), financial data, contracts and agreements, NDAs, etc. ID 20619
Ransomware	Patron Insurance Services id20618 View details	2025-06-12	United States	Finance / Legal / Insurance	—
Patron Insurance Services has been serving its clients’ needs thr oughout the Metropolitan Washington D.C. area including Maryland, Virginia, and Washington D.C. since 1984. We are going to upload about 7 GB of corporate data. Lots of docu ments with client personal information (DOB, Emails address, addr ess, phones, driver licenses), detailed financial data, contracts and agreements, NDAs, etc. ID 20618
Ransomware	NyN id20537 View details	2025-06-09	Spain	Construction / Real Estate	—
NyN is a real estate developer in Barcelona and provinces. We are going to upload about 30 GB of corporate data. Lots of fin ancial data of almost all of their hotels and other divisions, in ternal correspondence, a bit of personal files of employees, lots of contracts and agreements, clients data, NDAs, etc. ID 20537
Ransomware	Homeyer Consulting Services, Inc id20495 View details	2025-06-06	United States	Services	—
Homeyer Consulting Services, Inc. is a global water consulting fi rm. We have a multimillion dollar laboratory dedicated to testing treated water, and a structured team of field consultants who co nsult to over 6,800 sites worldwide. We are going to upload about 169 GB of corporate data. There are a lot of employee personal documents (passport scans of each empl oyee), lots of confidential contracts, agreements correspondence, detailed financial data (audits, payment details, reports), clie nts data, NDAs, etc. ID 20495
Ransomware	Farmacisti Più Rinaldi S.p.A. id20494 View details	2025-06-06	Italy	Healthcare / Pharma	—
Farmacisti Più Rinaldi S.p.A. disctributes homeopathic products, herbal products, veterinary products, phytotherapeutic products, chemical substances and substances of plant origin including thos e of non-pharmaceutical use, medical and surgical devices, biocid es, medical devices, sanitary and hygienic items. We are going to upload about 15 GB of corporate data. There are a lot of employee personal documents, lots of contracts and agreem ents, detailed financial data (audits, payment details, reports), clients data, NDAs, etc. ID 20494
Ransomware	HBI Canada id20461 View details	2025-06-05	Canada	Finance / Legal / Insurance	—
HBI Sells smoking accessories to thousands of stores, distributor s, jobbers and cash & carry outlets nationwide. We are going to upload about 16 GB of corporate data. There are a lot of employee personal documents, lots of contracts and agreem ents, customers data, financial data (audits, payment details, re ports), NDAs, Minecraft posters, etc. ID 20461
Ransomware	Sturdevant's Auto Parts id20459 View details	2025-06-05	United States	Manufacturing / Engineering	—
Sturdevant's Auto parts is the regions largest automotive parts & accessory business with 40 locally owned stores in SD, ND, Iowa , Minnesota & Nebraska. We are going to upload about 16 GB of corporate data. Personal do cuments, lots of contracts and agreements, client data, financial data (audits, payment details, reports), etc. ID 20459
Ransomware	AMS Paving id20456 View details	2025-06-05	United States	Finance / Legal / Insurance	—
AMS Paving, Inc. has been providing quality paving and maintenanc e services throughout Southern California since 1981. We are going to upload about 17 GB of corporate data. Employee pe rsonal information (DLs, DOB, addresses, credit card details and so on), lots of contracts and agreements, client data, financial data, accounting and financial data, payment details, etc. ID 20456
Ransomware	RECYCLA id20455 View details	2025-06-05	Mexico	Finance / Legal / Insurance	—
RECYCLA provides a waste treatment, disposal and recovery service for companies in the industrial and artisan sectors based on the principles of the circular economy. We are going to upload about 160 GB of corporate data. A lot of d etailed employee personal information (DOB, addresses, credit car d details and so on), client data, financial data, contracts and agreements, NDAs, etc. ID 20455
Ransomware	DALB id20442 View details	2025-06-04	United States	Manufacturing / Engineering	—
DALB a global leader amongst the decorative and functional plasti cs manufacturing companies. We are going to upload about 25 GB of corporate data. Employee pe rsonal information (DLs, DOB, addresses, SSNs and so on), financi al data, contracts and agreements, client data, NDAs, etc. ID 20442
Ransomware	North American Lighting id20413 View details	2025-06-03	United States	Finance / Legal / Insurance	—
North American Lighting manufactures automotive lighting products . The company offers turn signal, clearance, fog, rear, center hi gh-mounted stop, and license plate lamps. We are going to upload about 22 GB of corporate data. Employee pe rsonal information, financial data (audits, payment details, repo rts, invoices), contracts and agreements, etc. ID 20413
Ransomware	Dynamic Engineering id20410 View details	2025-06-03	Pakistan	Manufacturing / Engineering	—
Dynamic Engineering provides best maintained production machine s hop equipment available. We are going to upload about 7 GB of corporate data. Employee (an d relatives) personal information, financial data, projects info, client data, contracts and agreements, NDAs, etc. ID 20410
Ransomware	Observer Media Group id20409 View details	2025-06-03	United States	Communication / Marketing	—
Observer Media Group Inc. is a multimedia company with seven news papers, four websites, four quarterly lifestyle magazines and 100 employees serving multiple communities around Florida. We are going to upload about 8 GB of corporate data. A lot of fil led out forms with personal data and credit card details, employe e personal information, financial data, client data, contracts an d agreements, etc. ID 20409
Ransomware	Sleepy Hollow Country Club id20408 View details	2025-06-03	United States	Finance / Legal / Insurance	—
Sleepy Hollow Country Club is a private country club located in S carborough, New York. We are going to upload about 14 GB of corporate data. Confidentia l agreements, a lot of employee personal information (DOB, passpo rts, social security cards, addresses, phones, emails, and so on) , detailed financial data, a bit of client data, contracts and ag reements, NDAs, etc. ID 20408
Ransomware	McKenzie Commercial Contractors id20330 View details	2025-05-29	United States	Construction / Real Estate	—
McKenzie Commercial delivers high-quality, cost-effective commerc ial construction services, while fostering a supportive work envi ronment for employees who provide exceptional workmanship. We are going to upload about 42 GB of corporate data. Employee pe rsonal information (DOB, passports, addresses, phones, emails, an d so on), financial data, client data, lots of project data, cont racts and agreements, confidential documents, NDAs, etc. ID 20330
Ransomware	AGME Automated assembly solutions id20328 View details	2025-05-29	Germany	Manufacturing / Engineering	—
AGME Automated Assembly Solutions design and manufacture special purpose machines that best meet the automatic assembly needs of d ifferent industries. We are going to upload about 10 GB of corporate data. Lot of empl oyee personal information (DOB, passport id, addresses, phones, e mails, and so on), projects info, financial data, client data, co ntracts and agreements, confidential documents, NDAs, etc. ID 20328
Ransomware	Termignoni SpA id20327 View details	2025-05-29	Italy	Other	—
Termignoni SpA designs and creates motorbike exhaust systems for use at the highest levels. We are going to upload about 1,5 GB of corporate data. Lot of per sonal information (DOB, address, phones, emails, and so on), fina ncial data, client data, contracts and agreements, NDAs, etc. ID 20327
Ransomware	Del Corona & Scardigli Canada id20326 View details	2025-05-29	Canada	Finance / Legal / Insurance	—
Del Corona & Scardigli Canada provides a variety of logistics ser vices for all your import, export and triangular shipments: air, sea and land transport, warehousing and distribution, etc. We are going to upload about 15 GB of corporate data. Employee in formation (DOB, address, phones and so on), financial data (audit s, payment details, reports), lots of client data, correspondence , contracts and agreements, NDAs, etc. ID 20326
Ransomware	LaboratoriosBelloch (Nelly, Yunsey,Fresh feel) id20293 View details	2025-05-28	Spain	Communication / Marketing	—
The company creates personal care products and cosmetic s. Here is the access to 25 GB of corporate data. Lots of projects files, detailed financial data, information ab out all clients, contracts, correspondence, a bit of em ployee personal documents, and a lot of other data of s uch brands as Nelly, Yunsey and Fresh feel cosmetics. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. Open uTorrent, or any another torrent client. Add torrent file or paste the magnet URL to upload the data safely. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:608838B7636014D269C7DD03B34AE5F28A1 F8A88&dn=laboratoriosbelloch.com&tr=udp://tracker.openb ittorrent.com:80/announce&tr=udp://tracker.opentrackr.o rg:1337/announce ID 20293
Ransomware	High Grade Materials id20292 View details	2025-05-28	United States	Finance / Legal / Insurance	—
High Grade Materials is a Michigan-based company specializing in concrete and concrete-related products. We are going to upload about 20 GB of corporate data. A lot of em ployee information (DOB, passport number, address, phone and so o n), detailed financial data (audits, payment details, reports, in voices), contracts and agreements, death/birth certificates, NDAs , etc. ID 20292
Ransomware	Flagship Bank id20282 View details	2025-05-27	United States	Finance / Legal / Insurance	—
Flagship Bank was founded by a local Board of Directors, owned by committed local shareholders and operated by successful, local b ankers with deep roots in our community. We are going to upload about 40 GB of corporate data. A lot of cl ient information (DOB, SSN, passport number, address, DLs, phone and so on), detailed financial data, contracts and agreements, ce rtificates, etc. ID 20282
Ransomware	TOP Ships Inc., Stock Symbol TOPS id20281 View details	2025-05-27	Greece	Energy	—
TOP Ships is an international owner and operator of modern, fuel- efficient "ECO" tanker vessels currently focusing on the transpor tation of crude oil and petroleum products We are going to upload about 65 GB of corporate data. Lots of doc uments with detailed employee personal information, detailed fina ncial data, contracts, certificates, etc. ID 20281
Ransomware	Brackett & Ellis id20276 View details	2025-05-27	United States	Communication / Marketing	—
Brackett & Ellis provides legal advice for private businesses of all sizes, governmental entities and non-profit organizations. We are going to upload about 40 GB of corporate data. Lots of cli ent information, financial data and payment details, contracts, e mployee personal documents, etc. ID 20276
Ransomware	Laboratorios Belloch(Nelly, Yunsey, Fresh feel) id20261 View details	2025-05-26	Spain	Communication / Marketing	—
The company creates personal care products and cosmetics. We are going to upload about 25 GB of corporate data. Lots of pro jects files, detailed financial data, information about all clien ts, contracts, correspondence, a bit of employee personal documen ts, and a lot of other data of such brands as Nelly, Yunsey and F resh feel cosmetics. ID 20261
Ransomware	Insight PipeContracting id20214 View details	2025-05-24	United States	Communication / Marketing	—
Insight Pipe Contracting is a leading provider of trenc hless maintenance and rehabilitation services for waste water, stormwater, and other underground utilities. Here is the access to 7 GB of corporate documents such as: personal files of employees, client data, projects info, financial data (audits, tax statements, payment d etails, reports, lots of invoices), corporate NDAs, agr eements, confidential internal documents, etc. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. Open uTorrent, or any another torrent client. Add torrent file or paste the magnet URL to upload the data safely. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:4EDA730D86BE18983FBA77A928D6AD543D3 6FACD&dn=insightpipe.com&tr=udp://tracker.openbittorren t.com:80/announce&tr=udp://tracker.opentrackr.org:1337/ announce ID 20214
Ransomware	Ghent Dredging id20203 View details	2025-05-23	Belgium	Construction / Real Estate	—
Ghent Dredging has made itself a name as a contractor in dredging and marine works. We are going to upload about 16 GB of corporate data. Detailed fi nancial data, client information, a bit of employee personal docu ments, etc. ID 20203
Ransomware	Delignit id20201 View details	2025-05-23	Germany	Services	—
Delignit AG develop, manufacture and sell ecological materials an d system solutions from renewable natural resources. We are going to upload about 24 GB of corporate data. Employee pe rsonal documents, numerous contracts and agreements, confidential client information (including Mercedes Benz files), detailed fin ancial data, etc. ID 20201
Ransomware	Murphy Pearson Bradley &Feeney id20193 View details	2025-05-22	United States	Finance / Legal / Insurance	—
Murphy Pearson Bradley & Feeney is an accomplished law firm specializing in trial practice, litigation and bus iness counseling. Here is the access to 182 GB of essential corporate dat a. A lot of detailed employees and clients personal inf ormation (birth/death certificates, passport, DLs and s o on), NDAs, confidentiality agreements, confidential c ourt records, financial data, etc. We have made the process of downloading company data as simple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Tra nsmission to use magnet links). You will find the torre nt file above. Open uTorrent, or any another torrent client. Add torrent file or paste the magnet URL to upload the data safely. Archives have no password. MAGNET URL: magnet:?xt=urn:btih:B198F404A5B3E3B3C736A24BCD044FEFD2B DBEFC&dn=mpbf.com&tr=udp://tracker.openbittorrent.com:8 0/announce&tr=udp://tracker.opentrackr.org:1337/announc e ID 20193
Ransomware	Bronx Pro Group id20192 View details	2025-05-22	United States	Communication / Marketing	—
Bronx Pro Group is a neighborhood-based firm that employs approxi mately 100 professional and support staff engaged in real estate development, construction, property management, and residential s ervices. We are going to upload about 269 GB of corporate data. Numerous e mployee personal documents (SSNs, passports, driver licenses, add resses medical documents), contracts and agreements, client infor mation, detailed financial data, etc. ID 20192
Ransomware	The Haymond Law Firm id20191 View details	2025-05-22	United States	Finance / Legal / Insurance	—
The Haymond Law Firm specializes in personal injury law, providin g expert legal representation for clients injured in accidents in cluding auto, motorcycle, medical malpractice, and slip and fall cases. Any many of their clients will be able to find their docum ents and photos in our blog soon. We are going to upload more than 20 GB of essential corporate doc uments such as: a lot of clients personal documents (passports, d river licenses, photos, documents with personal information inclu ding SSNs), court records, police reports, medical records, etc. ID 20191
Ransomware	Professional TestingCorporation (PTC) id20190 View details	2025-05-22	United States	Communication / Marketing	—
Professional Testing Corporation (PTC) is an established global l eader in testing and assessment services. We are going to upload about 5 GB of corporate data. Employee per sonal documents, medical records, confidentiality agreements, con tracts, client information, detailed financial data, project data . ID 20190
Ransomware	JDC Air & Sea Freight (HEUEL LOGISTICS Group) id20164 View details	2025-05-21	Germany	Transportation / Travel / Logistics	—
The JDC Air & Sea Freight is part of the HEUEL LOGISTICS Group. A s an international freight forwarder, the company has its focus o n air and sea cargo, as well as contract logistics. We are going to upload about 20 GB of corporate data. Employee pe rsonal information, lots of agreements and contracts, client info rmation, detailed financial data. ID 20164
Ransomware	Rommel's Ac\Rommel Electric\Rommel Harley - Davidson id20151 View details	2025-05-20	United States	Healthcare / Pharma	—
Rommel's Ace is part of Rommel Holdings, Inc., a mid-sized holdin g company located in Fruitland, MD. Rommel Holdings has owned and operated a variety of businesses dating back to the 1950's. We are going to upload about 2 GB of corporate data. This is not much but there is so much personal information of almost every em ployee including terminated ones. Passport numbers, addresses, pe rsonal emails, SSNs, medical records and is on. You will also fin d a lot of accounting and projects files of Rommel Electric and R ommel Harley - Davidson companies. ID 20151
Ransomware	MSM International (TOYOMI) id20149 View details	2025-05-20	Malaysia	Manufacturing / Engineering	—
TOYOMI was established in the year 1992 as a professional marketi ng unit of MSM Metal Industries Sdn Bhd (MSM) to provide sheet me tal forming services to the manufacturing and engineering sector both in Malaysia and internationally. We are going to upload more than 6 GB of corporate documents such as: employee personal documents, lot of detailed accounting file s of their partners, projects files. ID 20149
Ransomware	Making Tech Happen id20148 View details	2025-05-20	United States	IT	—
Making Tech Happen is a software solutions provider based in Sant a Rosa, CA. We are going to upload more than 8 GB of corporate documents such as: employee personal documents (passports, driver licenses, SSN s), accounting files, lots of projects files, etc. A diary record of one of employees as a bonus. ID 20148
Ransomware	BEST VISION id20147 View details	2025-05-20	Switzerland	Construction / Real Estate	—
Best Vision Immobiliare is a global real estate partner offering a diverse selection of properties across 19 regions. The company is committed to delivering exceptional service in every transacti on, making each experience extraordinary for its clients. We are going to upload more than 24 GB of essential corporate doc uments such as: employee and client personal documents (passports , driver licenses, confidentiality agreements), projects data, ND As etc. ID 20147
Ransomware	Williams Patent Crusher & Pulverizer Co. id20129 View details	2025-05-19	United States	Communication / Marketing	—
Williams Patent Crusher & Pulverizer Co. offers a vast product li ne including Roller Mills, Pulverizers, Hammer Mills, Primary & S econdary Crushers, Impact Dryer Mills, Impact Crushers, Refuse Sh redders, Shear Shredders, Nife Hogs, Nife Granulators, Wood Hogs, Chippers, Apron Pan Feeders, Feeder Breakers, Air Classifiers, S ingle & Double Roll Crushers, and so much more. We are going to upload more than 33 GB of essential corporate doc uments such as: employees personal emails, passport, driver licen se, SSNs, personal emails and home addresses, confidentiality agr eements, projects data, etc. ID 20129
Ransomware	Mantis Creative. Formerly known as WCI Rally. id20127 View details	2025-05-19	United States	Communication / Marketing	—
Mantis Creative. Visualization and creative solutions for real es tate projects and tomorrow's emerging brands. Mantis is a leading arch-viz & creative agency in north america, transforming ideas into high-performing brands built to conquer their environments. We are going to upload more than 45 GB of corporate documents suc h as: contracts, client data, projects, some financial data, etc. ID 20127
Ransomware	Pacific Summit Energy, Sumitomo Corporation affiliate id20085 View details	2025-05-16	United States	Energy	—
As an affiliate of Sumitomo Corporation, Pacific Summit Energy of fers global resources and local experts in natural gas, power, cr ude oil, and LNG. We are going to upload more than 163GB of corporate data. Detaile d employee personal information (passports, driver licenses, cred it card details and so on), numerous Sumitomo Corporation interna l files, financial data (audits, reports, invoices), client data, confidential agreements, project information, lots of NDAs, etc. ID 20085
Ransomware	Vezina Lawrence & Piscitelli id20026 View details	2025-05-15	United States	Finance / Legal / Insurance	—
Vezina, Lawrence & Piscitelli, P.A. provides legal services on be half of contractors, concessionaires and other public-private par tnership parties, design firms, sureties, and owners. We are going to upload more than 80GB of corporate data. Numerous court records, confidential settlement agreements, employee pers onal documents, lots of documents with client data, financials, N DA, etc. ID 20026
Ransomware	Av Alumitran id20015 View details	2025-05-14	Spain	Finance / Legal / Insurance	—
AV Alumitran is an established company with more than 40 years of experience in aluminium extrusion. We are going to upload more than 80GB of corporate data. A lot of project data (descriptions, drawings and so on), agreements, ver y detailed financial data (audits, payment details, reports, invo ices), etc. ID 20015
Ransomware	Murphy Pearson Bradley & Feeney id20014 View details	2025-05-14	United States	Finance / Legal / Insurance	—
Murphy Pearson Bradley & Feeney is an accomplished law firm speci alizing in trial practice, litigation and business counseling. We are going to upload more than 182 GB of essential corporate da ta. A lot of detailed employees and clients personal information (birth/death certificates, passport, DLs and so on), NDAs, confid entiality agreements, confidential court records, financial data, etc. ID 20014
Ransomware	Franman id20013 View details	2025-05-14	Greece	Services	—
Franman provides a wide range of services to the shipping industr y, focused on shipbuilding equipment, spare parts, ship repairs, service, consulting and security services. We are going to upload more than 15 GB of corporate data (10gb SQ Ls). A lot of employees personal information, NDAs, confidentiali ty agreements, financial data, lots of projects details. ID 20013
Ransomware	Superior Steel id20004 View details	2025-05-13	United States	Manufacturing / Engineering	—
Superior Steel is experienced in all manners of contracting arran gements including competitive bid, negotiated contract, design bu ild and fast track projects. We are going to upload more than 6 GB of corporate documents. Emp loyees passports, DLs, NDAs, confidentiality agreements, financia l data of clients, projects, documents containing personal inform ation, etc. ID 20004
Ransomware	Precision Tax Relief id20003 View details	2025-05-13	United States	Communication / Marketing	—
Precision Tax Relief is an established tax debt resolution firm, owned and operated by licensed, experienced and top-performing ta x professionals. We are going to upload more than 123GB of essential corporate doc uments. Passports, DLs, confidentiality agreements, financial dat a of clients, lots documents containing personal information, etc . ID 20003
Ransomware	Bervar and Jones id19948 View details	2025-05-09	United States	Finance / Legal / Insurance	—
Ward D. Jones has practiced law in Hawaii for 30 years and handle d trials in state courts on all of the islands, Hawaii federal co urt, as well as Hawaii arbitrations. We are going to upload more than 102GB of essential corporate doc uments. You will find a lot of client information (medical record s, drivers licenses, passports, birth\death certificates), court confidential files, financial data of clients, NDAs, etc. ID 19948
Ransomware	Klampfer Elektroanlagen id19947 View details	2025-05-09	Austria	Healthcare / Pharma	—
G. Klampfer Elektroanlagen GmbH is a company specializing on buil ding services as well as general contractor activities based in A ustria. We are going to upload more than 20GB of corporate documents. Lot s of detailed employee information (medical records, drivers lice nses), projects information, financial data of clients, NDAs, etc . ID 19947

‹ Prev 1 … 6 7 8 9 10 11 12 … 17 Next ›

Akira

Overview

Top Countries

Known Leak Locations (2)

Top Activity Sectors (18)

Typical Attacks (29)

Tools Observed (41)

Credential theft

Defense evasion

Discovery

Discovery & enumeration

Exfiltration

Networking & tunnelling

OffSec

Offensive security tooling

RMM Tools

Remote monitoring & management

Crypto Wallets (15)

Ransom Notes (3)

Victims (1676)

Restricted Access

Now you can see the leak, not just the listing