HackerFeeds
All ransomware groups

skira

8 tracked victims
·first seen 2025-03-06·last activity 2025-11-18

Activity analysis

HackerFeeds has tracked 8 victims claimed by skira since March 2025, most recently in November 2025 — ranking #228 of 332 groups (0% of all tracked ransomware victims). No new victims have been posted in the last 180 days; the most recent claim was in November 2025. Its most-targeted sector is Technology (2 victims), followed by Financial Services (2). The United States accounts for 4 victims (50% of those with a known location).

Victims per year

  • 20258

Top sectors

  • Technology2
  • Financial Services2
  • Public Sector1
  • Manufacturing1
  • Construction1
  • Business Services1

Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology

Group profile

Skira is a small ransomware group that emerged around late 2024, claiming responsibility for the breach of Carruth Compliance Consulting that exposed SSNs, W-2s, and financial records of employees across 36 US school districts, with five total claimed victims across the US, Turkey, and India.

Recent victims

DateWebsite / victimSectorCountry
2025-11-18
innovey.co.th
INNOVEX HOLDINGS CO., LTDinnovey.co.th
TechnologyJP
2025-05-01
dwcusa.com
Dedicated Web Consultants, Incdwcusa.com
TechnologyUS
2025-04-18
I
Independent Title Agency, LLC
Financial ServicesUS
2025-03-06
van.bel.tr
City government office in Vanvan.bel.tr
Government & DefenseTR
2025-03-06
awdiary.com
Law Diaryawdiary.com
Professional ServicesUS
2025-03-06
ncompliance.com
Carruth Compliance Consultingncompliance.com
Financial ServicesUS
2025-03-06
cclproducts.com
CCL Products Indiacclproducts.com
ManufacturingIN
2025-03-06
krisala.com
Krisala Developerkrisala.com
TechnologyIN