A newly tracked actor designated iah6477 surfaced on 2026-08-20 with three claimed victims posted the same day, spanning retail, financial services, and technology, with a concentration in the United States. The listing itself is unattributed, an "archive without group name," and no MITRE ATT&CK technique set has been catalogued for this entity yet, leaving its intrusion and encryption methods undocumented. Named claims include Regency Centers in retail, Acima in financial services, and a technology-sector target listed as Marvin with no confirmed country. Given the single-day burst and lack of prior activity, this profile reads as either a freshly formed operation or a rebrand testing its leak-site presence, and any characterization of motive or capability beyond the claims themselves remains unverified. No independent confirmation of the listed victims' breach status has been established at this time.