HC3: Analyst Note: Akira Ransomware

This report profiles the Akira ransomware gang, active since May 2023, which has claimed at least 81 victims and increasingly targets U.S. organizations—particularly in the healthcare sector—using a RaaS model and double-extortion tactics across both Windows and Linux environments; it highlights possible links to the former Conti group, notes primary geographic and industry focus areas, and references known MITRE ATT&CK-aligned TTPs while directing readers to HC3 for further technical detail.