Skip to content
Leak-site post naming marvin, captured by ThreatCluster

marvin

iah6477

Ransomware leak-site victim intelligence

Data size
2.2 TiB
Posted
Aug 20, 2026
Industry
Technology

Summary

Written by ThreatClusterfrom site fields, leak post, screenshot

The iah6477 group claims to have stolen 2.2 TiB of data from the victim marvin. The leak post describes the dataset as “cinder :: marvin” and notes a countdown for publication, with the archive listed as awaiting publication. The material states the victim and the group and gives a data size claim, but does not include a breakdown of data categories in this summary.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

cinder :: marvin

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

archive
awaiting publication
download size
2.2 TiB

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture