Service One Transportation

This record is a provider-reported ransomware claim attributed to akira. It is an allegation and has not been independently confirmed.

Claim context

Provider-reported sector: Transportation
Provider-reported country (disputed): Canada
Group-published claim date: 2026-10-30T00:00:00.000Z
First tracked: 2026-10-30T14:07:33.000Z
Last observed: 2026-10-30T14:29:54.364Z
Monitoring providers: 4
Independent monitoring providers: 4
Website: serviceonetransportation.com
Post URL: https://ransomfeed.it/
Data source: unified
Duplicate records merged: 3
Country dispute reasons: sources report different countries: Canada vs United States

Provider observation timeline

Newest observations first. Provider observations are not independent confirmation of an incident.

Monitoring provider: observed 2026-10-30T14:29:54.364Z; source-published 2026-10-30T00:00:00.000Z; retrieved 2026-10-30T15:01:02.832Z.
Monitoring provider: observed 2026-10-30T14:25:13.058Z; source-published 2026-10-30T14:25:13.058Z; retrieved 2026-10-30T15:01:02.832Z.
Monitoring provider: observed 2026-10-30T14:07:33.876Z; source-published 2026-10-30T00:00:00.000Z; retrieved 2026-11-03T10:05:19.544Z.
Monitoring provider: observed 2026-10-30T14:07:33.000Z; source-published 2026-10-30T14:07:33.000Z; retrieved 2026-11-02T09:21:51.155Z.

Provider records

Every stored provider record behind this claim, newest first.

Provider credit
cybercrime.works
Provider URL
https://cybercrime.works/leaks/7b6c1062-a978-462f-81e9-5c98d77d15ab
Feed id
cybercrime-works
Provider record id
7b6c1062-a978-462f-81e9-5c98d77d15ab
Observed
2026-10-30T14:29:54.364Z
Source-published
2026-10-30T00:00:00.000Z
Retrieved
2026-10-30T15:01:02.832Z
Format
paginated-rest
Transport
https-rest
Overlap class
primary
Independent corroboration
yes
Provider credit
RansomLook
Provider URL
https://www.ransomlook.io/
Feed id
ransomlook
Provider record id
derived-sha256:dd8f13c7e29e195b7ca40d3f3fcad59566431823b3a7b3a220810e0ef74d5b1a
MISP event UUID
14df1080-8db1-56e5-adf5-819e09bdd71f
Observed
2026-10-30T14:25:13.058Z
Source-published
2026-10-30T14:25:13.058Z
Retrieved
2026-10-30T15:01:02.832Z
Format
json-array
Transport
https-rest
Overlap class
primary
Independent corroboration
yes
Provider credit
ransomware.live
Provider URL
https://www.ransomware.live/
Feed id
privtools-ransomposts
Provider record id
derived-sha256:7404cae382be2c47cc46755a3728ab6bd8941593b9a530d46ff15083ee14c579
Observed
2026-10-30T14:07:33.876Z
Source-published
2026-10-30T00:00:00.000Z
Retrieved
2026-11-03T10:05:19.544Z
Format
json-array
Transport
https-json
Overlap class
primary
Independent corroboration
yes
Provider credit
RansomFeed.it
Provider URL
https://ransomfeed.it/
Feed id
ransomfeed
Provider record id
37688
Observed
2026-10-30T14:07:33.000Z
Source-published
2026-10-30T14:07:33.000Z
Retrieved
2026-11-02T09:21:51.155Z
Format
json-array
Transport
https-json
Overlap class
primary
Independent corroboration
yes

Tracker record history

Newest entries first. These dates describe tracker records, not attack dates.

Provider update: recorded 2026-11-02T09:25:26.255Z; associated provider observation 2026-10-30T14:07:33.000Z.
Provider update: recorded 2026-10-30T15:07:31.572Z; associated provider observation 2026-10-30T14:07:33.876Z.
Provider update: recorded 2026-10-30T15:01:38.284Z; associated provider observation 2026-10-30T14:07:33.876Z.
Initial tracker record: recorded 2026-10-30T14:17:25.052Z; associated provider observation 2026-10-30T14:07:33.876Z.