Akira
Data as of September 14, 2026.
Credential exposure before the attack
26.3% of Akira victims whose domain we can identify (412 of 1,567) had employee credentials leak in the 12 months before Akira named them as a victim.
We don't know whether any of these credentials were how Akira gained initial access.
What industries Akira targets
Sector identified for 1,019 of 1,568 victims.
| Manufacturing | 304 | |
| Financial Services | 115 | |
| Construction | 112 | |
| Legal | 84 | |
| Healthcare | 61 | |
| Technology | 53 | |
| Logistics | 52 | |
| Energy | 38 |
Where the victims are located
Country identified for 946 of 1,568 victims.
| United States | 585 | |
| Canada | 56 | |
| Germany | 51 | |
| United Kingdom | 32 | |
| Italy | 29 | |
| Brazil | 22 | |
| Switzerland | 21 | |
| Australia | 17 |
Most recent Akira victims
| Victim | Sector | Country | Posted |
|---|---|---|---|
| AK Stamping akstamping.com | Manufacturing | United States | Sep 11, 2026 |
| Eagle Construction eagleofva.com | Construction | United States | Sep 11, 2026 |
| George Cameron Nash georgecameronnash.com | Manufacturing | United States | Sep 11, 2026 |
| Kyodo USA kyodousa.com | Not identified | United States | Sep 10, 2026 |
| Brent Electric brentelectricinc.com | Construction | United States | Sep 9, 2026 |
| Brentwood Country Club brentwoodcc.net | Not identified | United States | Sep 9, 2026 |
| CreateASoft createasoft.com | Not identified | United States | Sep 9, 2026 |
| Stransky Heiz-Mess-Regeltechnik stransky.co.at | Energy | Austria | Sep 7, 2026 |
| Worrell worrellcorp.com | Not identified | United States | Sep 7, 2026 |
| Algra Group algragroup.ch | Manufacturing | Switzerland | Sep 3, 2026 |
| PennFab pennfab.com | Manufacturing | United States | Sep 3, 2026 |
| ScrubaDub Auto Wash Centers scrubadub.com | Automotive | United States | Sep 3, 2026 |
| BYK Construction bykconstruction.com | Construction | United States | Sep 2, 2026 |
| Congressional Iron Works congressionalironworks.com | Construction | United States | Sep 2, 2026 |
| Flex1 flex1.space | Technology | Canada | Sep 2, 2026 |
| Gale Credit Union galecu.net | Financial Services | United States | Sep 1, 2026 |
| Kfz Meisterbetrieb Jost kfzjost.de | Automotive | Germany | Sep 1, 2026 |
| WEMS Electronics wems.com | Manufacturing | United States | Sep 1, 2026 |
| Alumax Alumínios alumax.com.br | Construction | Brazil | Aug 31, 2026 |
| BEPeterson bepeterson.com | Manufacturing | United States | Aug 31, 2026 |
Showing the 20 most recent of 1,568. Browse recent data breaches for more.
Akira leak sites
Addresses we've seen Akira publish victims from. Any .onion address needs the Tor Browser.
akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onionakiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onionbxwu33iefqfc3rxigynn3ghvq4gdw3gxgxna5m4aa3o4vscdeeqhiqad.onioncloak7jpvcb73rtx2ff7kaw2kholu7bdiivxpzbhlny4ybz75dpxckqd.onionnoescapemsqxvizdxyl7f7rmg5cdjwp33pg2wpmiaaibilb4btwzttad.onionjbeg2dct2zhku6c2vwnpxtm2psnjo2xnqvvpoiiwr5hxnc6wrp3uhnad.onionlockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onionijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onionxw7au5pnwtl6lozbsudkmyd32n6gnqdngitjdppybudan3x3pjgpmpid.onion
Akira questions
Is Akira still active?
Yes. Akira posted its most recent victim on September 11, 2026. That's 37 victims in the last 30 days.
How many victims has Akira claimed?
Akira has named 1,568 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 655 of them were posted in the last 12 months.
When did Akira first appear?
The first victim we recorded for Akira was posted on January 9, 2023. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does Akira target?
Manufacturing accounts for the most victims we can classify, with 304. Financial Services follows at 115. We could identify a sector for 1,019 of 1,568 victims, so treat this as the shape of the targeting rather than a full census.
Has Akira already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.