Akira

As of Oct 19, 2026, Akira has listed 1,536 confirmed victims on its leak site since Apr 3, 2023, 4.8% of all victims tracked by Brandefense. Its most targeted country is United States (64.8% of its victims) and its most targeted sector is Consulting.

The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware. The first version of the Akira ransomware was written in…