Akira
We've curated 31 cybersecurity statistics about Akira to help you understand how this emerging ransomware variant is impacting organizations in 2025, including its tactics, targets, and the evolving defenses against it.
Showing 1-20 of 31 results
Among undisclosed ransomware attacks in Q1 2026, Qilin led with 339 attacks (16%), The Gentlemen 200 attacks (9%), and Akira 190 attacks (9%).
Akira, a Ransomware-as-a-Service operation that has run since 2023, drove a 53% increase in ransomware frequency in the second half of 2025.
Activity from the Qilin ransomware group declined by 25% and activity from the Akira ransomware group declined by 22%.
Akira ransom demands averaged $1.2M, which is 50% higher than the non-Akira average.
Two-thirds of Akira attacks in 2025 occurred on nights or weekends.
86% of Akira attacks occurred in environments where a SonicWall device was present.
Akira accounted for more than 40% of all ransomware claims in At-Bay’s portfolio for the full year.
Akira and Play, ranked as second and third most prolific ransomware groups, respectively.
The number of ransomware variants in LATAM rose from 48 to 79 with the most impactful gangs being the Qilin, The Gentlemen, SafePay, Akira and Inc. groups.
The fastest ransomware case observed, involving Akira ransomware, takes just three hours from breach to encryption.
The Akira ransomware group was linked to 776 total recorded attacks in 2025.
In Q3 2025, Akira, Qilin, and INC Ransomware accounted for 65% of all ransomware cases investigated by Beazley Security.
In Q3 2025, the Akira ransomware group claimed 167 posts on their public leak site.
In Q3 2025, the Akira ransomware group accounted for approximately 39% of Beazley Security incident response cases.
Akira was responsible for 139 undisclosed ransomware attacks in Q3 2025, representing 9% of all undisclosed ransomware attacks.
During Q3 2025, Akira claimed one healthcare industry organization as a victim on their DLS.
Akira's victim count in Q3 is 212% higher than the same period in 2024.
Akira experienced a single day spike of 20 claimed victims (organizations and individuals) on August 11th 2025.
Akira is among the top 3 ransomware outfits that impact organizations within the Technology vertical.
Akira had 150 victims (organizations and individuals) in Q3 2025.