iah6477
Also known as: CinderFirst seen August 20, 2026Active16 claimed victims
The claims below are reproduced as posted by iah6477 on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Archive without group name
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| mckenneys | October 18, 2026 | ransomware_live | — |
| alera | October 15, 2026 | ransomware_live | — |
| camden-living | October 15, 2026 | ransomware_live | — |
| buckle | October 15, 2026 | ransomware_live | — |
| hensley | October 15, 2026 | ransomware_live | — |
| sunshine-mills | October 15, 2026 | ransomware_live | — |
| middleby | October 15, 2026 | ransomware_live | — |
| hilmar-cheese | October 15, 2026 | ransomware_live | — |
| veritiv | September 15, 2026 | ransomware_live | — |
| trc-companies | August 29, 2026 | ransomware_live | — |
| swagelok | August 29, 2026 | ransomware_live | — |
| mat-holdings-inc | August 26, 2026 | ransomware_live | — |
| proampac | August 26, 2026 | ransomware_live | — |
| marvin | August 20, 2026 | ransomware_live | — |
| acima | August 20, 2026 | ransomware_live | — |
| regencycenters | August 20, 2026 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).