Usnext

This record is a provider-reported ransomware claim attributed to Akira. It is an allegation and has not been independently confirmed.

Claim context

Provider-reported sector: Not Found
Group-published claim date: 2026-11-02T00:00:00.000Z
First tracked: 2026-11-02T12:00:00.000Z
Last observed: 2026-11-02T15:01:09.037Z
Monitoring providers: 4
Independent monitoring providers: 3
Website: u.s.next
Post URL: https://recentbreaches.com/breach/usnext-akira-2026-11
Data source: unified
Duplicate records merged: 3

Provider observation timeline

Newest observations first. Provider observations are not independent confirmation of an incident.

Monitoring provider: observed 2026-11-02T15:01:09.037Z; source-published 2026-11-02T00:00:00.000Z; retrieved 2026-11-03T11:05:19.647Z.
Monitoring provider: observed 2026-11-02T13:25:58.693Z; source-published 2026-11-02T13:25:58.693Z; retrieved 2026-11-02T13:51:52.152Z.
Monitoring provider: observed 2026-11-02T13:12:04.895Z; source-published 2026-11-02T00:00:00.000Z; retrieved 2026-11-02T13:21:52.072Z.
Monitoring provider: observed 2026-11-02T12:00:00.000Z; source-published 2026-11-02T12:00:00.000Z; retrieved 2026-11-02T16:36:52.606Z.

Provider records

Every stored provider record behind this claim, newest first.

Provider credit
ransomware.live
Provider URL
https://www.ransomware.live/
Feed id
privtools-ransomposts
Provider record id
derived-sha256:1628ceb062c8fd14bab7426203094522afea516283fe4eefa9be33c74b9db0d2
Observed
2026-11-02T15:01:09.037Z
Source-published
2026-11-02T00:00:00.000Z
Retrieved
2026-11-03T11:05:19.647Z
Format
json-array
Transport
https-json
Overlap class
primary
Independent corroboration
yes
Provider credit
RansomLook
Provider URL
https://www.ransomlook.io/
Feed id
ransomlook
Provider record id
derived-sha256:c18ba038292c5222e93267db63f0b976a1a25cff5ac66dd2ff181aaff41d7f9e
MISP event UUID
a199479c-71af-5da0-bdb1-fb50ccbe6e35
Observed
2026-11-02T13:25:58.693Z
Source-published
2026-11-02T13:25:58.693Z
Retrieved
2026-11-02T13:51:52.152Z
Format
json-array
Transport
https-rest
Overlap class
primary
Independent corroboration
yes
Provider credit
cybercrime.works
Provider URL
https://cybercrime.works/leaks/9a6bdb6c-9264-4886-8976-0e4a81b9ad5c
Feed id
cybercrime-works
Provider record id
9a6bdb6c-9264-4886-8976-0e4a81b9ad5c
Observed
2026-11-02T13:12:04.895Z
Source-published
2026-11-02T00:00:00.000Z
Retrieved
2026-11-02T13:21:52.072Z
Format
paginated-rest
Transport
https-rest
Overlap class
primary
Independent corroboration
yes
Provider credit
RecentBreaches
Provider URL
https://recentbreaches.com/breach/usnext-akira-2026-11
Feed id
recentbreaches
Provider record id
derived-sha256:cbe74af088b69246e4bfb34ea875f38184b6d4dc00c4354bda9973220313ce06
Observed
2026-11-02T12:00:00.000Z
Source-published
2026-11-02T12:00:00.000Z
Retrieved
2026-11-02T16:36:52.606Z
Format
rss
Transport
https-rss
Overlap class
mirror
Independent corroboration
no

Tracker record history

Newest entries first. These dates describe tracker records, not attack dates.

Provider update: recorded 2026-11-02T16:40:27.933Z; associated provider observation 2026-11-02T12:00:00.000Z.
Provider update: recorded 2026-11-02T15:07:25.987Z; associated provider observation 2026-11-02T13:12:04.895Z.
Provider update: recorded 2026-11-02T13:53:22.524Z; associated provider observation 2026-11-02T13:12:04.895Z.
Initial tracker record: recorded 2026-11-02T13:25:02.082Z; associated provider observation 2026-11-02T13:12:04.895Z.