Ransomware Group intelligence
Akira
ActiveTrack Akira with 1703 published victims and 2 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Akira is tracked by Breach House as a ransomware group with 1703 published victims.
United States is currently the most targeted country in this dataset.
2 known leak locations are currently associated with this group.
Leak Status Distribution
1617
- Leaked 48 3.0%
- Pending 1569 97.0%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (2)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 2 | Onion service | Up checked 3h ago | akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion |
| Leak location 1 | Onion service | Up checked 3h ago | akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion |
Top Activity Sectors (18)
- Finance / Legal / Insurance 427
- Communication / Marketing 320
- Manufacturing / Engineering 172
- Services 130
- Construction / Real Estate 106
- Not identified 75
- IT 66
- Healthcare / Pharma 66
- Energy 40
- Transportation / Travel / Logistics 33
- Hospitality / Food & Beverage / Tourism 33
- Agriculture / Food 32
- Retail / E-commerce 29
- Telecommunications 28
- Education 25
- Public Sector 16
- NGOs / Associations 5
- null 1
Typical Attacks (29)
▼How Akira typically operates, as attributed by MITRE ATT&CK v19.2. Attributed via Akira, Akira, Akira _v2.
-
What they do: Akira uses valid account information to remotely access victim networks, such as VPN credentials.
What that means: Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
-
What they do: Akira uses compromised VPN accounts for initial access to victim networks.
What that means: Adversaries may leverage external-facing remote services to initially access and/or persist within a network.
-
T1047 Windows Management Instrumentation Execution
What they do: Akira will leverage COM objects accessed through WMI during execution to evade detection.
What that means: Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads.
-
T1059.001 PowerShell Execution
What they do: Akira has used PowerShell scripts for credential harvesting and privilege escalation.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
T1059.003 Windows Command Shell Execution
What they do: Akira executes from the Windows command line and can take various arguments for execution.
What that means: Adversaries may abuse the Windows command shell for execution.
-
T1106 Native API Execution
What they do: Akira executes native Windows functions such as GetFileAttributesW and `GetSystemInfo`.
What that means: Adversaries may interact with the native OS application programming interface (API) to execute behaviors.
-
What they do: Akira _v2 can create a child process for encryption.
What that means: Adversaries may create or modify system-level processes to repeatedly execute malicious payloads as part of persistence.
-
T1027.001 Binary Padding Stealth
What they do: Akira has used binary padding to obfuscate payloads.
What that means: Adversaries may use binary padding to add junk data and change the on-disk representation of malware.
-
T1036.005 Match Legitimate Resource Name or Location Stealth
What they do: Akira has used legitimate names and locations for files to evade defenses.
What that means: Adversaries may match or approximate the name or location of legitimate files, Registry keys, or other resources when naming/placing them.
-
T1480 Execution Guardrails Stealth
What they do: Akira _v2 will fail to execute if the targeted `/vmfs/volumes/` path does not exist or is not defined.
What that means: Adversaries may use execution guardrails to constrain execution or actions based on adversary supplied and environment specific conditions that are expected to be present on the target.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: Akira has disabled or modified security tools for defense evasion.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1558 Steal or Forge Kerberos Tickets Credential Access
What they do: Akira have used scripts to dump Kerberos authentication credentials.
What that means: Adversaries may attempt to subvert Kerberos authentication by stealing or forging Kerberos tickets to enable Pass the Ticket.
-
T1018 Remote System Discovery Discovery
What they do: Akira uses software such as Advanced IP Scanner and MASSCAN to identify remote hosts within victim networks.
What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
-
T1057 Process Discovery Discovery
What they do: Akira verifies the deletion of volume shadow copies by checking for the existence of the process ID related to the process created to delete these items.
What that means: Adversaries may attempt to get information about running processes on a system.
-
T1082 System Information Discovery Discovery
What they do: Akira uses the GetSystemInfo Windows function to determine the number of processors on a victim machine.
What that means: An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
-
T1083 File and Directory Discovery Discovery
What they do: Akira examines files prior to encryption to determine if they meet requirements for encryption and can be encrypted by the ransomware.
What that means: Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
-
T1135 Network Share Discovery Discovery
What they do: Akira can identify remote file shares for encryption.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1482 Domain Trust Discovery Discovery
What they do: Akira uses the built-in Nltest utility or tools such as AdFind to enumerate Active Directory trusts in victim environments.
What that means: Adversaries may attempt to gather information on domain trust relationships that may be used to identify lateral movement opportunities in Windows multi-domain/forest environments.
-
T1654 Log Enumeration Discovery
What they do: Akira _v2 can enumerate the trace, debug, error, info, and warning logs on targeted systems.
What that means: Adversaries may enumerate system and service logs to find useful data.
-
T1021.001 Remote Desktop Protocol Lateral Movement
What they do: Akira has used RDP for lateral movement.
What that means: Adversaries may use Valid Accounts to log into a computer using the Remote Desktop Protocol (RDP).
-
T1213.002 Sharepoint Collection
What they do: Akira has accessed and downloaded information stored in SharePoint instances as part of data gathering and exfiltration activity.
What that means: Adversaries may leverage the SharePoint repository as a source to mine valuable information.
-
T1560.001 Archive via Utility Collection
What they do: Akira uses utilities such as WinRAR to archive data prior to exfiltration.
What that means: Adversaries may use utilities to compress and/or encrypt collected data prior to exfiltration.
-
T1219 Remote Access Tools Command and Control
What they do: Akira uses legitimate utilities such as AnyDesk and PuTTy for maintaining remote access to victim environments.
What that means: An adversary may use legitimate remote access tools to establish an interactive command and control channel within a network.
-
T1567.002 Exfiltration to Cloud Storage Exfiltration
What they do: Akira will exfiltrate victim data using applications such as Rclone.
What that means: Adversaries may exfiltrate data to a cloud storage service rather than over their primary command and control channel.
-
T1486 Data Encrypted for Impact Impact
What they do: Akira encrypts files in victim environments as part of ransomware operations.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1489 Service Stop Impact
What they do: Akira _v2 can stop running virtual machines.
What that means: Adversaries may stop or disable services on a system to render those services unavailable to legitimate users.
-
T1490 Inhibit System Recovery Impact
What they do: Akira will delete system volume shadow copies via PowerShell commands.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
-
T1531 Account Access Removal Impact
What they do: Akira deletes administrator accounts in victim networks prior to encryption.
What that means: Adversaries may interrupt availability of system and network resources by inhibiting access to accounts utilized by legitimate users.
-
T1657 Financial Theft Impact
What they do: Akira engages in double-extortion ransomware, exfiltrating files then encrypting them, in order to prompt victims to pay a ransom.
What that means: Adversaries may steal monetary resources from targets through extortion, social engineering, technical theft, or other methods aimed at their own financial gain at the expense of the availability of these resources for victims.
Tools Observed (41)
▼Software Akira has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Credential theft
DonPAPI
LaZagne
Mimikatz
Defense evasion
PowerTool
Zemana Anti-Rootkit driver
Zemana Anti-Rootkit
Discovery
Advanced IP Scanner
Masscan
ReconFTW
SharpHound
SoftPerfect NetScan
Discovery & enumeration
Advanced IP Scanner
Bloodhound
ldapdomaindump
Masscan
ReconFTW
SharpHound
SharpShares
SoftPerfect NetScan
Exfiltration
FileZilla
MEGA
RClone
Temp[.]sh
WinSCP
Networking & tunnelling
Cloudflared
OpenSSH
Ngrok
OffSec
Impacket
Offensive security tooling
CrackMapExec
Impacket
NetExec
RMM Tools
AnyDesk
MobaXterm
Radmin
RustDesk
Remote monitoring & management
AnyDesk
MeshAgent
MobaXterm
Radmin
RustDesk
TeamViewer
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.
Crypto Wallets (15)
▼
$3,991,216
Received (USD)
24
Payments
15
Known wallets
$997,459
Largest single payment
2023-07-13 → 2024-09-17
Payment window
bitcoin · 15
| Address | Chain | Received (USD) | Payments |
|---|---|---|---|
bc1qr0pqfghr9cksfc5arr2rak3lt2y50v03pc76nh |
bitcoin | $997,461 | 2 |
bc1qfdzu6uv2nek524pe7lz4w0mxtt9898vfaegdaj |
bitcoin | $482,181 | 1 |
bc1q0dx45y82r5rt36sm38jv0k4dexwc4nj9z4ryw7 |
bitcoin | $446,073 | 2 |
bc1q9wnp6k7xxdqkdv4fa5ceyhv08espuskhu8ghq2 |
bitcoin | $351,883 | 1 |
bc1qknumj4326runqxfr58kg0s7v7gu9y5v5t9uv6h |
bitcoin | $298,537 | 2 |
bc1qr0txunr259we37wer7w6et33qyq0n6hv83pw24 |
bitcoin | $252,389 | 1 |
bc1q0lwpz2yufw3x9as6f679lwk8jx43g44683x5mc |
bitcoin | $229,395 | 4 |
bc1qhzd63mz9mfucak7yzfn65p6rcsgztnsqr3dak8 |
bitcoin | $150,205 | 1 |
bc1qqrsd02sqthm8gej8lfesgpx82saw7q2g5pjtah |
bitcoin | $149,891 | 1 |
bc1q4my6vqq8cg689drf9jccqudjclv67sz4cudkyd |
bitcoin | $139,534 | 1 |
bc1qpwwtck0zhzrj56fxeayz6wz5546nlp607qzpvh |
bitcoin | $109,655 | 2 |
bc1qghj85gz0dkr9jeucana3z4xu50ujtllj50rvj0 |
bitcoin | $106,115 | 2 |
+3 more wallets not shown (the 12 largest by amount received are listed).
Crowdsourced payment data from Ransomwhere, licensed CC BY 4.0. Figures are what has been reported and attributed to this family, not a confirmed total. Cite as: Cable, Jack. (2024). Ransomwhere: A Crowdsourced Ransomware Payment Dataset (1.1.0) [Data set]. Zenodo. https://doi.org/10.5281/zenodo.6512122
Ransom Notes (3)
▼The note this group leaves on a compromised machine. Click a filename to read it.
akira_readme_3.txt
Hi friends, Whatever who you are and what your title is, if you're reading this it means the internal infrastructure of your company is fully or partially dead, all your backups - virtual, physical - everything that we managed to reach - are completely removed. Moreover, we have taken a great amount of your corporate data prior to encryption. ATTENTION! Strictly prohibited: - Deleting files with .arika extension; - Replacing or renaming .arika and .akira files; - Using third party software to recover your systems. If you violate these rules, we cannot guarantee a successful recovery. Well, for now let's keep all the tears and resentment to ourselves and try to build a constructive dialogue. We're fully aware of what damage we caused by locking your internal sources. At the moment, you have to know: 1. Dealing with us you will save A LOT due to we are not interested in ruining you financially. We will study in depth your finance, bank & income statements, your savings, investments etc. and present our reasonable demand to you. If you have an active cyber insurance, let us know and we will guide you how to properly use it. Also, dragging out the negotiation process will lead to failing of the deal. 2. Paying us you save your TIME, MONEY, EFFORTS and be back on track within 24 hours approximately. Our decryptor works properly on any files or systems, so you will be able to check it by requesting a test decryption service from the beginning of our conversation. If you decide to recover on your own, keep in mind that you can permanently lose access to some files or accidentally corrupt them - in this case we won't be able to help. 3. The security report or the exclusive first-hand information that you will receive upon reaching an agreement is of great value, since NO full audit of your network will show you the vulnerabilities that we've managed to detect and use in order to get into, identify backup solutions and download your data. 4. As for your data, if we fail to agree, we will try to sell personal information/trade secrets/databases/source codes - generally speaking, everything that has a value on the darkmarket - to multiple threat actors at once. Then all of this will be published in our blog - akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad[.]onion. 5. We're more than negotiable and will definitely find a way to settle this quickly and reach an agreement which will satisfy both of us. 6. Negotiations with Akira can only be conducted in a chat room, which you can access using the login details provided below or in the notes (a readme.txt file) in your systems. You should ignore any attempts (such as emails/social media messages, phone calls, etc.) to redirect you to another chat or email address (proton.me is often used by unauthorized individuals) on our behalf. 7. Be careful while working with recovery agencies as they often try to use your cyber incident to stuff their pockets. There are many risks for you to lose money and get nothing in return. If you're indeed interested in our assistance and the services we provide you can reach out to us following simple instructions: 1. Install TOR Browser to get access to our chat room - torproject[.]org/download/. 2. Paste this link - https://akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion/d/[snip] . 3. Use this code - [snip] - to log into our chat. Keep in mind that the faster you will get in touch, the less damage we cause.
akira_readme_2.txt
Hi friends, Whatever who you are and what your title is, if you're reading this it means the internal infrastructure of your company is fully or partially dead, all your backups - virtual, physical - everything that we managed to reach - are completely removed. Moreover, we have taken a great amount of your corporate data prior to encryption. ATTENTION! Strictly prohibited: - Deleting files with .arika extension; - Replacing or renaming .arika and .akira files; - Using third party software to recover your systems. If you violate these rules, we cannot guarantee a successful recovery. Well, for now let's keep all the tears and resentment to ourselves and try to build a constructive dialogue. We're fully aware of what damage we caused by locking your internal sources. At the moment, you have to know: 1. Dealing with us you will save A LOT due to we are not interested in ruining you financially. We will study in depth your finance, bank & income statements, your savings, investments etc. and present our reasonable demand to you. If you have an active cyber insurance, let us know and we will guide you how to properly use it. Also, dragging out the negotiation process will lead to failing of the deal. 2. Paying us you save your TIME, MONEY, EFFORTS and be back on track within 24 hours approximately. Our decryptor works properly on any files or systems, so you will be able to check it by requesting a test decryption service from the beginning of our conversation. If you decide to recover on your own, keep in mind that you can permanently lose access to some files or accidentally corrupt them - in this case we won't be able to help. 3. The security report or the exclusive first-hand information that you will receive upon reaching an agreement is of great value, since NO full audit of your network will show you the vulnerabilities that we've managed to detect and use in order to get into, identify backup solutions and download your data. 4. As for your data, if we fail to agree, we will try to sell personal information/trade secrets/databases/source codes - generally speaking, everything that has a value on the darkmarket - to multiple threat actors at once. Then all of this will be published in our blog - akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad[.]onion. 5. We're more than negotiable and will definitely find a way to settle this quickly and reach an agreement which will satisfy both of us. If you're indeed interested in our assistance and the services we provide you can reach out to us following simple instructions: 1. Install TOR Browser to get access to our chat room - torproject[.]org/download/. 2. Paste this link - https://akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion/d/[snip] . 3. Use this code - [snip] - to log into our chat. Keep in mind that the faster you will get in touch, the less damage we cause.
akira_readme.txt
Hi friends, Whatever who you are and what your title is if you're reading this it means the internal infrastructure of your company is fully or partially dead, all your backups - virtual, physical - everything that we managed to reach - are completely removed. Moreover, we have taken a great amount of your corporate data prior to encryption. Well, for now let's keep all the tears and resentment to ourselves and try to build a constructive dialogue. We're fully aware of what damage we caused by locking your internal sources. At the moment, you have to know: 1. Dealing with us you will save A LOT due to we are not interested in ruining your financially. We will study in depth your finance, bank & income statements, your savings, investments etc. and present our reasonable demand to you. If you have an active cyber insurance, let us know and we will guide you how to properly use it. Also, dragging out the negotiation process will lead to failing of a deal. 2. Paying us you save your TIME, MONEY, EFFORTS and be back on track within 24 hours approximately. Our decryptor works properly on any files or systems, so you will be able to check it by requesting a test decryption service from the beginning of our conversation. If you decide to recover on your own, keep in mind that you can permanently lose access to some files or accidently corrupt them - in this case we won't be able to help. 3. The security report or the exclusive first-hand information that you will receive upon reaching an agreement is of a great value, since NO full audit of your network will show you the vulnerabilities that we've managed to detect and used in order to get into, identify backup solutions and upload your data. 4. As for your data, if we fail to agree, we will try to sell personal information/trade secrets/databases/source codes - generally speaking, everything that has a value on the darkmarket - to multiple threat actors at ones. Then all of this will be published in our blog - https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion. 5. We're more than negotiable and will definitely find the way to settle this quickly and reach an agreement which will satisfy both of us. If you're indeed interested in our assistance and the services we provide you can reach out to us following simple instructions: 1. Install TOR Browser to get access to our chat room - https://www.torproject.org/download/. 2. Paste this link - https://akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion. 3. Use this code - [snip] - to log into our chat. Keep in mind that the faster you will get in touch, the less damage we cause.
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (1703)
Search, filter and paginate the victim timeline for Akira. Showing 101–200 of 1703.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | Franz Krause artworksgroup id31014 View details | Germany | Other | — | pending | |
|
Franz Krause artworksgroup is a streamlined agency that leverages extensive experience in media and event management to deliver high-quality services while maintaining budget efficiency. The company emphasizes strong relationships and a commitment to client satisfaction. We will upload 81gb of corporate data soon. Employee information, detailed client information, financials, contracts and agreements, NDAs, confidential files, etc. |
||||||
| Ransomware | Franz Krause artworksgroup id31014 View details | United States | Other | — | pending | |
|
Franz Krause artworksgroup is a streamlined agency that leverages extensive experience in media and event management to deliver high-quality services while maintaining budget efficiency. The company emphasizes strong relationships and a commitment to client satisfaction. We will upload 81gb of corporate data soon. Employee information, detailed client information, financials, contracts and agreements, NDAs, confidential files, etc. |
||||||
| Ransomware | Emerge2 Digital id30824 View details | United States | IT | — | leaked | |
|
Emerge2 Digital is an IT company based in the United States, providing various IT services. The company operates in the IT sector, offering services to its clients. Emerge2 Digital was listed as a ransomware victim associated with akira. |
||||||
| Ransomware | Emerge2 Digital id30824 View details | United States | IT | — | leaked | |
|
Emerge2 Digital specializes in providing digital marketing solutions tailored for dealer groups , retailers, distributors, and manufacturers. Since 1980, the company has been dedicated to hel ping clients enhance their digital presence and connect with more customers through turnkey sol utions and managed services. We will upload 30gb of corporate data soon. Employee information (passports and other docs), de tailed client information, financials, contracts and agreements and so on. |
||||||
| Ransomware | Emerge2 Digital id30824 View details | Canada | IT | — | leaked | |
|
Emerge2 Digital specializes in providing digital marketing solutions tailored for dealer groups , retailers, distributors, and manufacturers. Since 1980, the company has been dedicated to hel ping clients enhance their digital presence and connect with more customers through turnkey sol utions and managed services. We will upload 30gb of corporate data soon. Employee information (passports and other docs), de tailed client information, financials, contracts and agreements and so on. |
||||||
| Ransomware | Kruse Construction id30744 View details | United States | Construction / Real Estate | — | leaked | |
|
Kruse Construction is a US-based company operating in the construction and real estate sector, providing various services. The company is involved in building and development projects. Kruse Construction was listed as a ransomware victim associated with akira. |
||||||
| Ransomware | Kruse Construction id30744 View details | United States | Construction / Real Estate | — | leaked | |
|
Kruse Construction is a mechanical contractor with over 50 years of experience in the petroleum and petrochemical industry, specializing in the construction and maintenance of liquid petrole um truck, rail, and pipeline terminals. The company also provides services for bulk plants, pip eline pump stations, lube oil plants, and underground pipelines. We will upload 10gb corporate data soon. Employee information (passports, lots of DLs), project s, contracts, financials, customer files and so on. |
||||||
| Ransomware | University Sprinkler Systems id30745 View details | United States | Construction / Real Estate | — | pending | |
|
University Sprinkler Systems is a company operating in the construction and real estate sector in the US, providing services related to sprinkler systems. The company's offerings likely include installation, maintenance, and repair of sprinkler systems for various properties. University Sprinkler Systems was listed as a ransomware victim associated with akira. |
||||||
| Ransomware | University Sprinkler Systems id30745 View details | United States | Construction / Real Estate | — | pending | |
|
University Sprinklers is BC's largest irrigation company, specializing in the installation of i rrigation sprinkler systems and landscape lighting for both residential and commercial clients. With over 40 years of experience, they provide tailored irrigation solutions that ensure healt hy lawns and gardens while conserving water. We will upload corporate data soon. Employee information (DLs and other files), client informat ion and and other internal files. |
||||||
| Ransomware | University Sprinkler Systems id30745 View details | Canada | Construction / Real Estate | — | pending | |
|
University Sprinklers is BC's largest irrigation company, specializing in the installation of i rrigation sprinkler systems and landscape lighting for both residential and commercial clients. With over 40 years of experience, they provide tailored irrigation solutions that ensure healt hy lawns and gardens while conserving water. We will upload corporate data soon. Employee information (DLs and other files), client informat ion and and other internal files. |
||||||
| Ransomware | Novasport s.r.o. id30728 View details | Czechia | Retail / E-commerce | — | leaked | |
|
Novasport s.r.o. operates in the retail and e-commerce sector, providing various products and services to customers in the Czech Republic. As a company in the retail and e-commerce space, Novasport s.r.o. is involved in the sale and distribution of goods through online and offline channels. Novasport s.r.o. was listed as a ransomware victim associated with akira |
||||||
| Ransomware | Novasport s.r.o. id30728 View details | Czechia | Retail / E-commerce | — | leaked | |
|
Novasport spol. s r.o. We are a global manufacturer of LEKI brand ski, hiking, and Nordic walki ng poles. Novasport was founded in 1992 by Klaus Lenhart, the owner of the LEKI brand. LEKI has a long history of collaborating with the world’s top athletes. We will upload 17gb corporate data soon. Detailed employee information (passports and other inf ormation), projects, contracts, financials, clients information and so on. |
||||||
| Ransomware | Finer & Finer id30727 View details | Other | — | leaked | ||
|
Finer & Finer operates in the other sector, providing various offerings. The company is involved in activities related to its sector, although specific details about its location and services are not readily available. Finer & Finer was listed as a ransomware victim associated with akira |
||||||
| Ransomware | Finer & Finer id30727 View details | Other | — | leaked | ||
|
Finer & Finer CPA is a leading accounting firm based in Randolph, MA, offering a wide range of services including tax preparation, personal financial planning, and business accounting. They cater to business owners, executives, and independent professionals, providing personalized and professional attention to each client. We will upload 50gb corporate data soon. Employee information (personal docs and health informa tion, tests and so on), contracts, client information and other internal information. |
||||||
| Ransomware | Finer & Finer id30727 View details | United States | Other | — | leaked | |
|
Finer & Finer CPA is a leading accounting firm based in Randolph, MA, offering a wide range of services including tax preparation, personal financial planning, and business accounting. They cater to business owners, executives, and independent professionals, providing personalized and professional attention to each client. We will upload 50gb corporate data soon. Employee information (personal docs and health informa tion, tests and so on), contracts, client information and other internal information. |
||||||
| Ransomware | McKeever , Varga & Senko id30698 View details | Finance / Legal / Insurance | — | leaked | ||
|
McKeever, Varga & Senko operates within the finance, legal, and insurance sector, providing services to clients. The entity's specific location and offerings are not publicly disclosed. McKeever, Varga & Senko was listed as a ransomware victim associated with akira |
||||||
| Ransomware | McKeever , Varga & Senko id30698 View details | Finance / Legal / Insurance | — | leaked | ||
|
McKeever Varga & Senko is a firm of Certified Public Accountants dedicated to providing superio r client service and professional guidance. They offer a range of services including informativ e articles, interactive financial calculators, and links to external resources to assist their clients. We will upload 12gb of corporate data soon. Detailed client internal data, employee personal in formation, contracts and agreements, confidential files, NDAs, etc. |
||||||
| Ransomware | McKeever , Varga & Senko id30698 View details | United States | Finance / Legal / Insurance | — | leaked | |
|
McKeever Varga & Senko is a firm of Certified Public Accountants dedicated to providing superio r client service and professional guidance. They offer a range of services including informativ e articles, interactive financial calculators, and links to external resources to assist their clients. We will upload 12gb of corporate data soon. Detailed client internal data, employee personal in formation, contracts and agreements, confidential files, NDAs, etc. |
||||||
| Ransomware | L&A Transport id30699 View details | Transportation / Travel / Logistics | — | leaked | ||
|
L&A Transport operates in the transportation sector, providing logistics services. The company is involved in the movement of goods and people, facilitating trade and commerce. L&A Transport was listed as a ransomware victim associated with akira. |
||||||
| Ransomware | L&A Transport id30699 View details | Transportation / Travel / Logistics | — | leaked | ||
|
L & A Transport is a reputable trucking company with over 50 years of experience in providing a wide range of shipping services, including international shipping, white glove handling, and l ogistics solutions for businesses of all sizes. They specialize in truckloads, container loads, less than container truckloads, and offer warehousing services in Union, NJ. We will upload corporate data soon. Detailed financials, employee information (DLs and so on), contracts, client information, NDAs, etc. |
||||||
| Ransomware | L&A Transport id30699 View details | United States | Transportation / Travel / Logistics | — | leaked | |
|
L & A Transport is a reputable trucking company with over 50 years of experience in providing a wide range of shipping services, including international shipping, white glove handling, and l ogistics solutions for businesses of all sizes. They specialize in truckloads, container loads, less than container truckloads, and offer warehousing services in Union, NJ. We will upload corporate data soon. Detailed financials, employee information (DLs and so on), contracts, client information, NDAs, etc. |
||||||
| Ransomware | Westcoast Communication Services id30640 View details | United Kingdom | Telecommunications | — | leaked | |
|
Westcoast Communication Services is a telecommunications company based in the United Kingdom, providing various communication services. The company operates in the telecommunications sector, offering services to clients in GB. Westcoast Communication Services was listed as a ransomware victim associated with akira. |
||||||
| Ransomware | Westcoast Communication Services id30640 View details | United Kingdom | Telecommunications | — | leaked | |
|
Westcoast Communication Services is a leading expert in low voltage and structured cabling, spe cializing in voice and data cabling solutions across Florida. They offer a range of services in cluding network integration, telecommunication networks, and access control systems. We will upload 20gb of corporate data soon. Employee personal information (DL, passports, SS ca rd scans and so on), contracts and agreements, customer info, financials, confidential agreemen ts, etc. |
||||||
| Ransomware | Westcoast Communication Services id30640 View details | United States | Telecommunications | — | leaked | |
|
Westcoast Communication Services is a leading expert in low voltage and structured cabling, spe cializing in voice and data cabling solutions across Florida. They offer a range of services in cluding network integration, telecommunication networks, and access control systems. We will upload 20gb of corporate data soon. Employee personal information (DL, passports, SS ca rd scans and so on), contracts and agreements, customer info, financials, confidential agreemen ts, etc. |
||||||
| Ransomware | Nesco Bus Maintenance id30641 View details | United States | Transportation / Travel / Logistics | — | leaked | |
|
Nesco Bus Maintenance is a company operating in the transportation sector in the US, providing bus maintenance services. The company is involved in the upkeep and repair of buses, ensuring they are safe and operational for transportation purposes. Nesco Bus Maintenance was listed as a ransomware victim associated with akira |
||||||
| Ransomware | Nesco Bus Maintenance id30641 View details | United States | Transportation / Travel / Logistics | — | leaked | |
|
Nesco Bus specializes in manufacturing and maintaining a wide range of buses, including school, childcare, activity, commercial, and specialty buses. With over three decades of experience, t hey are committed to providing exceptional customer support and ensuring the safety and comfort of their passengers. We will upload 26gb of corporate data soon. Employee personal information (DL scans and so on), contracts and agreements, customer info, payment details and other financial docs, etc. |
||||||
| Ransomware | Plumley Engineering id30610 View details | United Kingdom | Manufacturing / Engineering | — | leaked | |
|
Plumley Engineering is a company based in the United Kingdom, operating in the manufacturing and engineering sector. The company likely provides various engineering services and products to its clients. Plumley Engineering was listed as a ransomware victim associated with akira |
||||||
| Ransomware | Plumley Engineering id30610 View details | United Kingdom | Manufacturing / Engineering | — | leaked | |
|
Plumley Engineering is a firm specializing in civil, environmental, and geotechnical engineerin g services. They prioritize client service and quality, focusing on problem-solving and design with a common-sense approach. We will upload 11gb of corporate data soon. Client and employee personal information, projects information, contracts and agreements, confidential files, NDAs and so on. |
||||||
| Ransomware | Plumley Engineering id30610 View details | United States | Manufacturing / Engineering | — | leaked | |
|
Plumley Engineering is a firm specializing in civil, environmental, and geotechnical engineerin g services. They prioritize client service and quality, focusing on problem-solving and design with a common-sense approach. We will upload 11gb of corporate data soon. Client and employee personal information, projects information, contracts and agreements, confidential files, NDAs and so on. |
||||||
| Ransomware | Pioneer Construction id30582 View details | Canada | Construction / Real Estate | — | pending | |
|
Pioneer Construction is a company operating in the construction and real estate sector in Canada, providing various services related to building and development. As a key player in its sector, Pioneer Construction is involved in projects across Canada. Pioneer Construction was listed as a ransomware victim associated with akira |
||||||
| Ransomware | Pioneer Construction id30582 View details | Canada | Construction / Real Estate | — | pending | |
|
Established in 1933, Pioneer Construction is headquartered in Grand Rapids, Michigan. They prov ide construction solutions throughout the United States including general contracting, crane se rvices, program management, and more. We will upload 168gb of corporate data soon. Scanned employee personal documents (passports, DL s and other docs), projects information, detailed financials, client internal information, cont racts and agreements, confidential correspondence and other files, NDAs and so on. |
||||||
| Ransomware | Transworld Signs id30520 View details | United States | Manufacturing / Engineering | — | pending | |
|
Transworld Signs is a company operating in the manufacturing and engineering sector, based in the United States. The company likely provides sign manufacturing services, given its name. Transworld Signs was listed as a ransomware victim associated with akira. |
||||||
| Ransomware | Transworld Signs id30520 View details | Canada | Manufacturing / Engineering | — | pending | |
|
Transworld Signs produces and sources a complete range of promotional and POP graphics. The com pany offers digital and standard menu boards, large scale graphics and any other interior graph ics or signage to support the company's customers' needs. We will upload 17gb of corporate data soon. Employee personal information (names, DOB and so on ), projects files, financials, client internal information, contracts and agreements and so on. |
||||||
| Ransomware | Ironmark id30521 View details | United States | Communication / Marketing | — | pending | |
|
Ironmark is a company based in the US, operating in the communication and marketing sector, providing various services to its clients. As a marketing firm, Ironmark likely offers services such as advertising, branding, and digital marketing solutions. Ironmark was listed as a ransomware victim associated with akira. |
||||||
| Ransomware | Ironmark id30521 View details | United States | Communication / Marketing | — | pending | |
|
Founded and headquartered in Annapolis Junction, Maryland, Ironmark is a provider of marketing, creative, printing and communications services. They specialize in marketing strategy, creativ e & web development, digital marketing, printing services, and more. We will upload 190gb of corporate data soon. Employee personal information (passports, DLs and other personal information), projects information, detailed financials, client internal informa tion, contracts and agreements, NDAs and so on. |
||||||
| Ransomware | Vandalia Rental id30417 View details | United States | Construction / Real Estate | — | pending | |
|
Vandalia Rental operates in the construction and real estate sector in the United States, providing rental services to clients. The company is involved in various activities related to construction and property management. Vandalia Rental was listed as a ransomware victim associated with akira. |
||||||
| Ransomware | Vandalia Rental id30417 View details | United States | Construction / Real Estate | — | pending | |
|
Vandalia Rental has served the Greater Dayton and Greater Cincinnati and Northern Kentucky mark ets since 1961. Vandalia Rental proudly services construction rental accounts ranging from smal l businesses to large publicly traded corporations, government agencies, and municipalities thr oughout the Ohio, Indiana, and Kentucky regions, and sales accounts throughout the country. We will upload 40gb of corporate data soon. Detailed employee and client personal information ( SSN numbers, name, DOB and so on), projects files, financials, client internal information, con tracts and agreements and so on. |
||||||
| Ransomware | Wade's Dairy id30358 View details | United Kingdom | Agriculture / Food | — | pending | |
|
Wade's Dairy is a company operating in the agriculture and food sector in Great Britain. The company likely produces and distributes dairy products to customers in the region. Wade's Dairy was listed as a ransomware victim associated with akira. |
||||||
| Ransomware | Wade's Dairy id30358 View details | United Kingdom | Agriculture / Food | — | pending | |
|
A family-owned business for over a century, Wade's Dairy has been a staple in the Connecticut c ommunity. We will upload corporate data soon. Detailed employee personal information (name, DOB, SSN, DL, height, weight, race, sex, eyes and hair color, tattoo information, emails, phones and so on), projects files, financials, customers, contracts and agreements and so on. |
||||||
| Ransomware | RISE Architecture id30320 View details | United States | Construction / Real Estate | — | leaked | |
|
RISE Architecture is a company operating in the construction and real estate sector in the US. The company provides architectural services, contributing to the development of buildings and structures. RISE Architecture was listed as a ransomware victim associated with akira. |
||||||
| Ransomware | RISE Architecture id30320 View details | United States | Construction / Real Estate | — | leaked | |
|
RISE Architecture is a full-service architectural firm based in New York and New Jersey that sp ecializes in dynamic design solutions for complex real estate projects across residential, comm ercial, mixed-use, industrial, and institutional sectors. We will upload 57gb of corporate data soon. Employee personal information, a bit of client file s, projects files, financials, contracts and agreements and so on. |
||||||
| Ransomware | Chisholm Persson & Ball id30315 View details | United States | Finance / Legal / Insurance | — | pending | |
|
Chisholm Persson & Ball is a company operating in the finance, legal, and insurance sector in the United States. The firm provides various services to its clients, although specific details about its operations are not widely available. Chisholm Persson & Ball was listed as a ransomware victim associated with akira. |
||||||
| Ransomware | Chisholm Persson & Ball id30315 View details | United States | Finance / Legal / Insurance | — | pending | |
|
Chisholm, Persson & Ball, PC is a law firm located in Laconia, NH, specializing in various lega l services including Estate Planning, Probate Administration, Family Law, Business Law, and Civ il Litigation. The firm has been recognized for its excellence, winning multiple awards in the Lakes Region for Best Law Firm and other categories. We will upload 45gb of corporate data soon. Client and employee personal information (client pa ssports, visas, DLs, SSNs and so on), confidential client docs, financial, contracts and agreem ents, court files, police reports and other legal files. |
||||||
| Ransomware | Excalibur Rentals id30316 View details | Construction / Real Estate | — | leaked | ||
|
Excalibur Rentals is a company operating in the construction and real estate sector, providing rental services to clients. The company's offerings cater to the needs of the construction and real estate industries. Excalibur Rentals was listed as a ransomware victim associated with akira |
||||||
| Ransomware | Excalibur Rentals id30316 View details | Construction / Real Estate | — | leaked | ||
|
Excalibur Rentals is dedicated to providing reliable rental equipment services, ensuring that c lients can complete their jobs safely, on time, and within budget. They offer a range of equipm ent including boom lifts, telehandlers, and light towers. We will upload 45gb of corporate data soon. Employee personal information (name, addresses, SSN s and so on), contracts and agreements, a bit of financials, customers info, etc. |
||||||
| Ransomware | Edge Solutions | Stone Ridge Payments id30314 View details | United States | Finance / Legal / Insurance | — | pending | |
|
Edge Solutions | Stone Ridge Payments is a financial services company based in the US, operating within the finance, legal, and insurance sector. The company provides payment solutions to its clients. It was listed as a ransomware victim associated with akira. |
||||||
| Ransomware | Edge Solutions | Stone Ridge Payments id30314 View details | United States | Finance / Legal / Insurance | — | pending | |
|
Edge Solutions is dedicated to leveraging technology to create a better world. With a focus on integrity, they offer top-notch services to help clients achieve their business objectives. The ir team is committed to future-proofing businesses through innovative solutions. We will upload 67gb of corporate data soon. Employee personal information (400 passports and D L scans, SSNs, w9 forms and so on), financials, contracts and agreements, confidential document s, lots of NDAs, etc. |
||||||
| Ransomware | Stone Ridge Payments id30388 View details | United States | Finance / Legal / Insurance | — | pending | |
|
Stoneridge Payments is a US-based company operating in the finance, legal, and insurance sector, providing payment solutions. The company is located in the United States and offers various financial services. Stoneridgepayments.com was listed as a ransomware victim associated with akira. |
||||||
| Ransomware | Stone Ridge Payments id30388 View details | United States | Finance / Legal / Insurance | — | pending | |
|
We will upload 67gb of corporate data soon. Employee personal information (400 passports and D L scans, SSNs, w9 forms and so on), financials, contracts and agreements, confidential document s, lots of NDAs, etc. |
||||||
| Ransomware | Refinery Hotel id30150 View details | United States | Hospitality / Food & Beverage / Tourism | — | leaked | |
|
Refinery Hotel is a luxury hotel located in the US, operating in the hospitality sector, offering accommodations and services to guests. The hotel is part of the tourism and food and beverage industry, providing a unique experience to its customers. Refinery Hotel was listed as a ransomware victim associated with akira |
||||||
| Ransomware | Refinery Hotel id30150 View details | United States | Hospitality / Food & Beverage / Tourism | — | leaked | |
|
Refinery Hotel is a luxury hotel located near Bryant Park in New York City, offering a modern r einterpretation of a historic hat factory. The hotel features 197 stylish rooms with industrial accents and modern amenities, alongside dining options such as the Parker & Quinn restaurant a nd the Refinery Rooftop bar. We will upload 15gb of corporate data soon. Employee personal information (passports, DLs, SSNs , w9 forms), guests information, financials, contracts and agreements, lots of NDAs, etc. |
||||||
| Ransomware | About Todd Hamaker & Johnson id30129 View details | United States | Finance / Legal / Insurance | — | pending | |
|
About Todd Hamaker & Johnson is a US-based company operating in the finance, legal, and insurance sector, providing various services to its clients. The company is likely involved in financial transactions, legal consultations, and insurance services. About Todd Hamaker & Johnson was listed as a ransomware victim associated with akira. |
||||||
| Ransomware | About Todd Hamaker & Johnson id30129 View details | United States | Finance / Legal / Insurance | — | pending | |
|
Todd, Hamaker & Johnson, LLP is a professional tax and accounting firm based in Lufkin, Texas, dedicated to providing personalized services to both individuals and businesses. The firm offer s a comprehensive range of services including tax, accounting, audit, and financial guidance. We will upload 40gb of corporate data soon. Lots of client and employee personal information (p assports, SSNs, DLs and other information), detailed financials, client financials and other co nfidential client docs, contracts and agreements, etc. |
||||||
| Ransomware | Advanced Business Systems id30112 View details | United States | IT | — | pending | |
|
Advanced Business Systems is an IT company based in the US, providing various business solutions. The company operates in the IT sector, offering services to businesses. Advanced Business Systems was listed as a ransomware victim associated with akira. |
||||||
| Ransomware | Advanced Business Systems id30112 View details | United States | IT | — | pending | |
|
Advanced Business Systems, Inc. is a locally owned business serving the Quad Cities area, speci alizing in a wide range of office products and solutions including copiers, printers, IT servic es, phone systems, and furniture. We will upload 31gb of corporate data soon. Employee personal information (88 SSNs, passports a nd other docs), NDA, projects, contracts and agreements, customer information and so on. |
||||||
| Ransomware | Precise Forms id30042 View details | Other | — | leaked | ||
|
Precise Forms is a company that operates in the other sector, providing various offerings to its clients. The company is likely based in the United States, given its name and sector. Precise Forms was listed as a ransomware victim associated with akira. |
||||||
| Ransomware | Precise Forms id30042 View details | Other | — | leaked | ||
|
Precise Forms, Inc. specializes in manufacturing high-quality aluminum forms for concrete const ruction, offering a complete line of standard and decorative forms along with necessary accesso ries. Their products cater to a variety of applications including residential homes, commercial buildings, and swimming pools, designed for rapid setting and stripping to meet the needs of c ompetitive contractors. We will upload 10gb of corporate data soon. Employee personal information (DLs (at least 15 num bers), 75 SSNs, and other personal docs), NDAs, projects, contracts and agreements, customer in formation and so on. |
||||||
| Ransomware | Precise Forms id30042 View details | United States | Other | — | leaked | |
|
Precise Forms, Inc. specializes in manufacturing high-quality aluminum forms for concrete construction, offering a complete line of standard and decorative forms along with necessary accessories. Their products cater to a variety of applications including residential homes, commercialbuildings, and swimming pools, designed for rapid setting and stripping to meet the needs of competitive contractors.We will upload 10gb of corporate data soon. Employee personal information (DLs (at least 15 numbers), 75 SSNs, and other personal docs), NDAs, projects, contracts and agreements, customer information and so on. |
||||||
| Ransomware | JMS Southeast id30020 View details | United States | Construction / Real Estate | — | leaked | |
|
JMS Southeast is a company operating in the construction and real estate sector in the United States. The company likely provides various services related to construction and real estate development. JMS Southeast was listed as a ransomware victim associated with akira. |
||||||
| Ransomware | JMS Southeast id30020 View details | United States | Construction / Real Estate | — | leaked | |
|
JMS Southeast, Inc. specializes in high-quality temperature measurement and control products, i ncluding thermocouples, RTDs, thermowells, and transmitters, catering to various industries suc h as aerospace, pharmaceuticals, and oil and gas. We will upload 25gb of corporate data soon. Employee personal information (name, addresses and so on), payment details, NDAs, projects, contracts and agreements, agreements with government, customer information and so on. |
||||||
| Ransomware | Padget Technologies id30021 View details | IT | — | pending | ||
|
Padget Technologies is a company operating in the IT sector, providing various technology-related services and solutions. As a part of the IT industry, the company likely offers a range of products and services to its clients. Padget Technologies was listed as a ransomware victim associated with akira. |
||||||
| Ransomware | Padget Technologies id30021 View details | IT | — | pending | ||
|
Padget Technologies specializes in advanced robotics and automation solutions tailored for effi cient and cost-effective production. Their services include designing and fabricating custom ma chinery, assembly systems, and pre-engineered robotic palletizing cells. We will upload corporate data soon. Employee personal docs (DLs, SSNs, w9s and other sensitive docs), payment details, lot of NDAs, projects, contracts and agreements, client information, et c. |
||||||
| Ransomware | Padget Technologies id30021 View details | United States | IT | — | pending | |
|
Padget Technologies specializes in advanced robotics and automation solutions tailored for effi cient and cost-effective production. Their services include designing and fabricating custom ma chinery, assembly systems, and pre-engineered robotic palletizing cells. We will upload corporate data soon. Employee personal docs (DLs, SSNs, w9s and other sensitive docs), payment details, lot of NDAs, projects, contracts and agreements, client information, et c. |
||||||
| Ransomware | Jit Ex id29999 View details | Transportation / Travel / Logistics | — | leaked | ||
|
Jit Ex operates in the transportation, travel, and logistics sector, providing services to facilitate the movement of goods and people. The company's offerings likely include freight management, supply chain optimization, and other related services. Jit Ex was listed as a ransomware victim associated with akira. |
||||||
| Ransomware | Jit Ex id29999 View details | Transportation / Travel / Logistics | — | leaked | ||
|
JIT-EX, LLC is a privately owned for-hire trucking fleet based in Memphis and Nashville, specia lizing in regional and local truckload services, dedicated fleets, and crossdock solutions. The company offers a variety of services including transloading, dock services, and storage traile rs, aiming to be a one-stop solution for transportation needs. We will upload 40gb of corporate data soon. Employee personal docs (passports, DL numbers of 31 7 persons, SSNs, w9s and so on), credit card details, payment details, lot of NDAs, projects, c ontracts and agreements, customer information, etc. |
||||||
| Ransomware | Miami Machine id30001 View details | United States | Manufacturing / Engineering | — | leaked | |
|
Miami Machine is a manufacturing and engineering company based in the United States. The company operates in the manufacturing sector, providing various engineering services and products. Miami Machine was listed as a ransomware victim associated with akira |
||||||
| Ransomware | Miami Machine id30001 View details | United States | Manufacturing / Engineering | — | leaked | |
|
Miami Machine Inc. specializes in machining, fabrication, and engineering services tailored for the paper, power, steel, and OEM markets. With over 50 years of experience and a manufacturing space of 86,000 sq. ft, they provide high-quality, custom machinery and equipment solutions. We will upload corporate data soon. Employee personal docs (passports and other docs, photos), NDAs, projects, contracts and agreements, client information, etc. |
||||||
| Ransomware | Leo International id29985 View details | Manufacturing / Engineering | — | leaked | ||
|
Leo International is a company operating in the manufacturing and engineering sector. The company likely provides various products and services related to its sector, although specific details are not available. Leo International was listed as a ransomware victim associated with akira. |
||||||
| Ransomware | Leo International id29985 View details | Manufacturing / Engineering | — | leaked | ||
|
Leo International, established in 1986, serves as a comprehensive source for the PVF, HVAC, and Plumbing Industry. The company specializes in manufacturing products through Forging, Casting, and Injection Molding processes. We will upload 10gb of corporate data soon. Employee personal docs (passports, SSNs, DLs, medic al information, phones, photos, doc scans, addresses and so on), confidential internal files an d so on. |
||||||
| Ransomware | Leo International id29985 View details | United States | Manufacturing / Engineering | — | leaked | |
|
Leo International, established in 1986, serves as a comprehensive source for the PVF, HVAC, and Plumbing Industry. The company specializes in manufacturing products through Forging, Casting, and Injection Molding processes. We will upload 10gb of corporate data soon. Employee personal docs (passports, SSNs, DLs, medic al information, phones, photos, doc scans, addresses and so on), confidential internal files an d so on. |
||||||
| Ransomware | IH Engineers id29986 View details | Manufacturing / Engineering | — | leaked | ||
|
IH Engineers operates in the manufacturing and engineering sector, providing various services and products to clients. The company is involved in the design, development, and implementation of engineering solutions. IH Engineers was listed as a ransomware victim associated with akira. |
||||||
| Ransomware | IH Engineers id29986 View details | Manufacturing / Engineering | — | leaked | ||
|
IH Engineers, P.C. is a consulting firm with over 25 years of experience, dedicated to providin g innovative and technically excellent services in design, construction, and structural evaluat ion. The firm operates primarily in New Jersey, New York, and Pennsylvania, serving a diverse r ange of clients. We will upload 65gb of corporate data soon. Employee personal docs (passports, SSNs, DLs and ot her HR information), confidential internal files, NDAs, projects, contracts and agreements, dra wings and so on. |
||||||
| Ransomware | IH Engineers id29986 View details | United States | Manufacturing / Engineering | — | leaked | |
|
IH Engineers, P.C. is a consulting firm with over 25 years of experience, dedicated to providin g innovative and technically excellent services in design, construction, and structural evaluat ion. The firm operates primarily in New Jersey, New York, and Pennsylvania, serving a diverse r ange of clients. We will upload 65gb of corporate data soon. Employee personal docs (passports, SSNs, DLs and ot her HR information), confidential internal files, NDAs, projects, contracts and agreements, dra wings and so on. |
||||||
| Ransomware | Ntd Apparel id30088 View details | Manufacturing / Engineering | — | leaked | ||
|
NTD Apparel specializes in creating high-quality apparel that connects with pop culture, offeri ng a range of licensed products and in-house labels. They provide comprehensive services includ ing market analysis, price point management, and visual merchandising to retailers. We will upload 62gb of corporate data soon. Employee personal docs (passports, SSNs, DLs, medic al information, phones, addresses and so on), projects, client information, confidential agreem ents and so on. |
||||||
| Ransomware | Berg Lilly id29983 View details | Other | — | pending | ||
|
Berg Lilly PC is a trusted law firm based in Bozeman, Montana, with over 60 years of experience providing quality legal representation to both local and national clients. The firm specialize s in various areas of law, including business entity law, civil litigation, commercial transact ions, construction law, employment law, estate planning, personal injury, and real estate law. We will upload 50gb of corporate data soon. Clients personal information (passports, SSNs, DLs, addresses, phones, confidential files, medical information, financials and so on), court heari ngs, police reports and other legal documents. |
||||||
| Ransomware | Apptricity id29984 View details | United States | IT | — | pending | |
|
Apptricity Corporation is a global enterprise software provider for Supply Chain and Spend Mana gement. Apptricity differs from other manufacturers by offering platform-agnostic, secure solut ions that optimize inventory, asset and expense tracking processes while still being easily int egrated with existing systems. We will upload 12gb of corporate data soon. Employee personal docs (passports, SSNs, DLs, w9s, and other personal information), lots of projects, source codes, NDAs, client and partner file s, agreements and so on. |
||||||
| Ransomware | Smith Filter id29961 View details | Manufacturing / Engineering | — | pending | ||
|
Smith Filter is a leading manufacturer of high-quality air and grease filters, established in 1 939. They offer a wide range of products including permanent, disposable, and high-efficiency f ilters, catering to both OEM and custom orders. We will upload 10gb of corporate data soon. Employee personal information (passports, SSNs, DLs and other docs scans), credit cards information, projects info, clients information, NDAs, etc . |
||||||
| Ransomware | Insite Architects id29942 View details | Construction / Real Estate | — | pending | ||
|
InSite Architects was founded in 2002 as a firm dedicated to the design and planning for senior and affordable housing. It is our belief that every project is as individual as the client, pr ogram, and site. We will upload 65gb of corporate data soon. Employee personal information (passports, SSNs, DLs and other personal docs), credit cards information, projects, clients and partners info, etc. |
||||||
| Ransomware | DDC Domus Design Collection id29828 View details | Retail / E-commerce | — | pending | ||
|
Founded in 1991 and headquartered in New York City, New York, DDC Domus Design Collection is a company that manufactures as well as sell furniture items. We will upload 55gb of corporate data soon. Detailed financials, employee personal information (passports, addresses, phones, emails and so on), credit cards information, projects, clients i nfo, etc. |
||||||
| Ransomware | Port Air Express id29727 View details | Transportation / Travel / Logistics | — | pending | ||
|
Port Air Express Inc. specializes in reliable logistics and transport solutions, negotiating co mpetitive rates with airlines and shipping companies globally. Their services include domestic and international shipping, containerized shipping, breakbulk cargo handling, heavy lift operat ions, and customs clearance. We will upload 15gb of corporate data soon. Employee personal information (passports, DL scans, SSN cards and more), financial information payment details, credit cards, etc. |
||||||
| Ransomware | The Midland Theatre id29730 View details | United Kingdom | Hospitality / Food & Beverage / Tourism | — | pending | |
|
The Midland Theatre originally opened in December of 1928 in Newark, Ohio. The theatre draws te ns of thousands of visitors each year to a wide array of programming from family-friendly event s and holiday specials to top artists in every genre. We will upload corporate data soon. Employee personal information (w-9 forms and other docs), f inancials, credit cards, client, partners and guests information, NDAs, etc. |
||||||
| Ransomware | Associated Investor Services id29731 View details | Finance / Legal / Insurance | — | pending | ||
|
Associated Financial Consultants & Investor Services is an independent boutique firm dedicated to creating, growing, and protecting wealth since 1972. They offer a range of services includin g wealth management, life planning, retirement planning, and insurance for families and individ uals, as well as customized retirement and employee benefit plans for businesses. We will upload 77gb of corporate data soon. Employee personal information (passports, DLs, SSNs and so on), financials, confidential legal documents, client and partners information, NDAs, e tc. |
||||||
| Ransomware | Spray Equipment & Service Center id29703 View details | Manufacturing / Engineering | — | pending | ||
|
Spray Equipment & Service Center is a leading provider of consultation, turnkey industrial fini shing equipment, and training services for coating applications. They cater to clients seeking efficient and high-performance coating solutions, enhancing product quality and streamlining pr oduction processes. We will upload 26gb of corporate data soon. Employee personal information (DLs, w-9 forms and s o on), financials, contracts, projects info, drawings, partners information, etc. |
||||||
| Ransomware | Rockaway River Country Club id29704 View details | NJ | Hospitality / Food & Beverage / Tourism | — | pending | |
|
Rockaway River Country Club is a premier country club located in Denville, NJ, offering a range of amenities including golf, dining, and facilities for racquets and aquatics. The club has a rich history of excellence, celebrating 100 years of service to its members. We will upload 25gb of corporate data soon. Employee personal information (DLs and other docs, contracts with personal information), financials, contracts and agreements, projects info, draw ings, clients and partners information, etc. |
||||||
| Ransomware | SMPC Architects id29705 View details | Construction / Real Estate | — | pending | ||
|
SMPC Architects is an architecture firm based in Albuquerque, New Mexico, specializing in creat ing innovative and sustainable spaces. The firm focuses on community-oriented projects and coll aborates closely with clients to meet their needs. We will upload 163gb of corporate data soon. Employee personal information (passports, DLs, SSN cards and so on), financials, lots of contracts and confidential settlements, NDAs, clients an d partners information, etc. |
||||||
| Ransomware | Centre Ellipse id29699 View details | Other | — | pending | ||
|
Centre Ellipse Strasbourg is an ambulatory medical facility that offers personalized care pathw ays to improve the health of patients with chronic diseases or syndromes. The center features a multidisciplinary team that provides both physical and psychological support, focusing on card iac rehabilitation and mental health services. We will upload 142gb of corporate data soon. Health information for at least 500 patients, empl oyees personal information, financials, lots of contracts, confidential agreements and so on. |
||||||
| Ransomware | HRC Sicherheitsdienste id29683 View details | Germany | Services | — | pending | |
|
HRC Sicherheitsdienste is a family-owned security service provider with over 45 years of experi ence, offering a wide range of security solutions including object protection, construction sit e monitoring, reception services, and event security. They cater to various clients such as hos pitals, supermarkets, and museums, ensuring tailored security packages to meet specific needs. We will upload 24gb of corporate data soon. Employee information (German passports, IDs and so on), credit cards, payment details, financials, lots of agreements and contracts, confidential agreements and so on. |
||||||
| Ransomware | Kennon Worldwide id29640 View details | Manufacturing / Engineering | — | pending | ||
|
Kennon Worldwide offers a wide range of telecommunications services including PRI, VoIP, and in tegrated services, representing over 40 service providers to ensure the best pricing and soluti ons for clients. We will upload 30gb of corporate data soon. Contracts, client information, NDAs, and other inte rnal files. |
||||||
| Ransomware | Oaks Park id29641 View details | United States | Hospitality / Food & Beverage / Tourism | — | pending | |
|
Oaks Amusement Park, located in Portland, Oregon, has been a family-friendly entertainment dest ination since 1905, offering a variety of attractions including rides, a roller rink, and a min i golf course. We will upload 10gb of corporate data soon. Employee information, credit cards, payment details , lots of contracts and agreements, NDAs and so on. |
||||||
| Ransomware | T/CCI Manufacturing id29644 View details | Manufacturing / Engineering | — | pending | ||
|
T/CCI is a world leader in compressor technology including reciprocating, swash plate, wobble p late, variable compressor and air brake compressor designs. We are an Original Equipment Manufa cturer for trucking, off-highway, agriculture/construction, specialty vehicle and transport ref rigeration markets. We will upload 35gb of corporate data soon. Employee personal docs (passports, DLs, SSNs, payme nt details, credit cards and so on), contracts and agreements, client and partners information, NDAs, financials, lots of confidential files, etc. |
||||||
| Ransomware | National Standard Parts Associates id29621 View details | Manufacturing / Engineering | — | pending | ||
|
NSPA is an American manufacturer specializing in heat shrink terminals and connectors, as well as heat shrink tubing and installation tools. Their product offerings cater to industries requi ring reliable sealed electrical systems. We will upload 53gb of corporate data soon. Employee personal docs (passports, DLs, SSNs and ot her information), contracts and agreements, a bit of client and partners information, lots of N DAs, detailed financials, confidential files, and so on. |
||||||
| Ransomware | Northern Ohio Regional Multiple Listing Service id29622 View details | United States | Construction / Real Estate | — | pending | |
|
MLS Now operates on advanced technology to provide members with timely, accurate, and meaningfu l data and services. The company offers hands-on education, extensive online documentation, and a robust support help desk staffed by local professionals. We will upload corporate data soon. Board members information, contracts, NDAs, detailed financ ials, confidential files, and so on. |
||||||
| Ransomware | Sunrise, Toscana Country Club, AndalusiaCountry Club. id29583 View details | Spain | Hospitality / Food & Beverage / Tourism | — | pending | |
|
Sunrise Company is a renowned real estate developer and builder specializing in resort and gol f course communities. Established in 1963, the company has developed over 16,000 homes and con dominiums, along with creating multiple resort hotels and commercial structures. Toscana Country Club is a luxury private equity club and residential community located in Indi an Wells, California, offering an exceptional lifestyle amidst beautiful olive and cypress lan dscapes. Andalusia Country Club is a luxurious community near Palm Springs, offering distinctive golf c ourse homes and a premier country club experience. Here is the access to 13gb of corporate data of the above mentioned entities. Employee persona l information including family of the CEO (passports, DLs, death records and so on), contracts and agreements, detailed financials, clients information, projects, etc. Click the download button. You will find several password-free archives. Click on any of them to start the download. |
||||||
| Ransomware | Cherokee Distributing Co id29586 View details | United States | Transportation / Travel / Logistics | — | pending | |
|
Cherokee Distributing Company offers the leading brands of beer and other nonalcoholic beverage s. In addition to their headquarters in Knoxville, they manage distribution centers in Chattano oga, Cookeville, Kingsport, Pulaski and Tullahoma. We will upload 40gb of corporate data soon. Employee personal docs (passports, DLs, SSNs), cont racts and agreements, partner and client files, detailed financials, projects, NDAs, confidenti al files, etc. |
||||||
| Ransomware | Factors Western id29587 View details | Finance / Legal / Insurance | — | pending | ||
|
Factors Western specializes in providing factoring services to businesses across various indust ries, helping them convert receivables into cash for improved cash flow and business growth. We will upload corporate data soon. Lots of employee and client data (name, phones, passports), hockey players personal information (Connor McDavid and others), contracts and agreements, fin ancials, projects, etc. |
||||||
| Ransomware | Hal Otey Financial id29588 View details | Finance / Legal / Insurance | — | pending | ||
|
Hal Otey Financial offers a range of financial services including wealth management, financial planning, retirement planning, investment management, estate planning, and tax planning. We will upload corporate data soon. Lots client data (passports, DLs, social security numbers, health and insurance files and so on), contracts and agreements, detailed financials, projects, etc. |
||||||
| Ransomware | Schacht Law Office id29398 View details | Finance / Legal / Insurance | — | pending | ||
|
Schacht Law Office specializes in intellectual property legal services, focusing on the protect ion of patents, trademarks, copyrights, and trade secrets. They assist clients in defining and safeguarding their ideas to ensure the prosperity of their intellectual property and brand. We will upload 20gb of corporate data soon. Lots of clients data (credit cards, name, addresses , phones and so on), contracts and agreements, NDAs, projects, etc. |
||||||
| Ransomware | Interstate Roofing id29402 View details | United States | Construction / Real Estate | — | pending | |
|
Interstate Roofing brings its customers the best in quality and service. Since 1988, Interstate has established itself as one of the largest and most trusted exterior-improvement companies i n the Northwest. We will upload 16gb of corporate data soon. Employee personal docs (scanned passports and LDs, 60 SSNs and so on), contracts and agreements, clients info, projects, etc. |
||||||
| Ransomware | Healthtrax Fitness &Wellness id29404 View details | United States | Services | — | pending | |
|
Healthtrax, founded in 1979 and headquartered Glastonbury, CT, offers facilities and programs that integrate fitness, wellness education, traditional medical services and rehabilitation. H ealthtrax forms partnerships with leading health care systems to create a welcoming, centraliz ed place for members of the community to achieve their personal fitness and health goals. Here is the access to 10gb of corporate data. Employee and clients personal information (name, Dl and passport numbers, SSNs), contracts and agreements, personal records, financials, NDA a nd other confidential docs. Click the download button. You will find several password-free archives. Click on any of them to start the download. |
||||||
| Ransomware | GS Yuasa Lithium Power id29443 View details | Japan | Manufacturing / Engineering | — | pending | |
|
GS Yuasa Lithium Power specializes in advanced batteries and battery systems, primarily serving clients in the Aerospace, Industrial, Military, and Specialty markets across North America. Wi th decades of research and development, their lithium-ion cells are known for proven performanc e and reliability, particularly in demanding applications such as satellites and undersea techn ologies. We will upload corporate data soon. Lots of project data (BOEING satellite and other interestin g directories), contracts and agreements, lots of drawings and specifications, clients info, ND A, etc. |
||||||