iah647

iah647 is a ransomware/data-extortion group whose leak-site activity was first tracked by this dashboard on 2026-08-20. In roughly ten days of tracked activity it listed seven victims, with its most recent post on 2026-08-29, indicating an active extortion campaign. The listed victims span manufacturing, packaging, engineering services, commercial real estate, and consumer finance, suggesting broad or opportunistic targeting. No widely reported vendor research, law-enforcement advisories, or blockchain-analytics findings tie iah647 to a known ransomware family, affiliate network, or ransom proceeds. Whether the group conducts full encryption alongside data theft, and how it gains initial access, remain unknown based on public reporting.