Skip to content
Leak-site post naming middleby, captured by ThreatCluster

middleby

iah6477

Ransomware leak-site victim intelligence

Data size
133.7 GiB
Files
8,760
Posted
Oct 15, 2026
Countdown
hosted until 2027-10-15 12:12 UTC · 343d 19h left
Country
US
Industry
Manufacturing

Summary

Written by ThreatClusterfrom leak post, screenshot

The iah6477 group claims to have obtained 66.3 MiB + 133.6 GiB of Middleby data across 8,760 files, published on their leak site. The leak post is listed and includes a countdown showing the data will remain hosted until 2027-10-15 12:12 UTC. These are the group’s claims, not an independent confirmation of a breach.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

archive: PUBLIC · free download hosted until 2027-10-15 12:12 UTC · 343d 19h left download everything · 4 parts (each opens on its own): part 1 of 4 (zip/middleby-part1of4.zip) 45.8 GiB part 2 of 4 (zip/middleby-part2of4.zip) 29.3 GiB part 3 of 4 (zip/middleby-part3of4.zip) 29.3 GiB part 4 of 4 (zip/middleby-part4of4.zip) 29.3 GiB type size name dir 66.3 MiB entra_id (entra_id/) dir 133.6 GiB m365 (m365/) 2 folder(s) · 8760 file(s) · 133.7 GiB

File types seen
zip × 4
Sample files (4)
zip/middleby-part1of4.zip
zip/middleby-part2of4.zip
zip/middleby-part3of4.zip
zip/middleby-part4of4.zip

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

archive_notice
archive: PUBLIC • free download hosted until 2027-10-15 12:12 UTC • 357d 3h left

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture