Ransomware Group intelligence
Incransom
ActiveTrack Incransom with 933 published victims and 7 known leak locations in a single intelligence view.
Overview
Incransom is tracked by Breach House as a ransomware group with 933 published victims.
United States is currently the most targeted country in this dataset.
7 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (7)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | incblog7vmuq7rktic73r4ha4j757m3ptym37tyvifzp2roedyyzzxid.onion |
| Leak location 2 | Onion service | Unknown | incbackrlasjesgpfu5brktfjknbqoahe2hhmqfhasc5fb56mtukn4yd.onion |
| Leak location 3 | Web location | Unknown | incbackend.top |
| Leak location 4 | Web location | Unknown | incapt.blog |
| Leak location 5 | Web location | Unknown | incapt.su |
| Leak location 6 | Onion service | Unknown | incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion |
| Leak location 7 | Onion service | Unknown | incbacg6bfwtrlzwdbqc55gsfl763s3twdtwhp27dzuik6s6rwdcityd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (933)
Search, filter and paginate the victim timeline for Incransom. Showing 1–100 of 933.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | https://eclmn.com/ id31010 View details | United States | IT | ||
|
Eclmn is an IT company based in the United States, offering various services within the information technology sector. The company operates in the US, providing IT solutions to its clients. Eclmn was listed as a ransomware victim associated with incransom. |
|||||
| Ransomware | https://eclmn.com/ id31010 View details | United States | IT | ||
|
A family-run health and residential care organization in Minnesota. They provide adapted housing, professional in-home support, and daily living solutions for adults with physical disabilities and limited mobility |
|||||
| Ransomware | Della Casa Group AG id31009 View details | Switzerland | Construction / Real Estate | ||
|
Della Casa Group AG is a Swiss-based company operating in the construction and real estate sector, providing various services and offerings to its clients. The company is involved in development, construction, and management of properties in Switzerland. Della Casa Group AG was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | Della Casa Group AG id31009 View details | Switzerland | Construction / Real Estate | ||
|
041 785 61 31 / 041 785 61 46 / [email protected] 041 785 61 36 / [email protected] 041 785 61 30 / [email protected] 041 785 61 33 / [email protected] 041 785 61 43 / [email protected] 041 785 61 42 / [email protected] *************************************************** (240,391,913,425 bytes) 86,332 Files, / 15,359 Folders Personal / Client Information Accounting / Finance Details of current and future projects Other |
|||||
| Ransomware | minigrip.com.mx id31005 View details | Mexico | Manufacturing / Engineering | ||
|
Minigrip.com.mx is a Mexico-based company operating in the manufacturing and engineering sector, providing various products and services. The company's offerings cater to a range of industries, leveraging its expertise in manufacturing and engineering. Minigrip.com.mx was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | minigrip.com.mx id31005 View details | Mexico | Manufacturing / Engineering | ||
|
Unauthorized access has been gained to the company's confidential files, including client data, proprietary R&D, and financial documentation. |
|||||
| Ransomware | DUCON id31001 View details | Colombia | Other | ||
|
DUCON is a company based in Colombia, operating in the other sector. The company provides various offerings, but specific details are not available. DUCON was listed as a ransomware victim associated with incransom. |
|||||
| Ransomware | DUCON id31001 View details | Colombia | Other | ||
|
Unauthorized access has been gained to the company's confidential files, including client data, proprietary R&D, and financial documentation. |
|||||
| Ransomware | greenecountyga.gov id31002 View details | United States | Public Sector | ||
|
Greenecountyga.gov is a government website serving Greene County in the state of Georgia, US, providing public services and information to its residents. As a public sector entity, it offers various services and resources, including county administration, law enforcement, and community development. Greenecountyga.gov was listed as a ransomware victim associated with incransom. |
|||||
| Ransomware | greenecountyga.gov id31002 View details | United States | Public Sector | ||
|
Greene County, Georgia is a historic and scenic county located in the east-central "Lake Country" region of the state, roughly halfway between Atlanta and Augusta. Established in 1786 as Georgia's 11th county, it is widely known for its combination of rural heritage, historic architecture, and upscale resort living centered around Lake Oconee. |
|||||
| Ransomware | foundationstofreedom.org id31003 View details | United States | NGOs / Associations | ||
|
Foundationstofreedom.org is a US-based non-governmental organization operating in the sector of NGOs and associations. The entity provides various offerings to support its mission. Foundationstofreedom.org was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | foundationstofreedom.org id31003 View details | United States | NGOs / Associations | ||
|
Foundations to Freedom is a US-registered 501(c)(3) non-profit organization that provides recovery housing, social adaptation programs, and comprehensive therapeutic support for individuals overcoming alcohol and substance abuse, as well as survivors of domestic violence.The organization is dedicated to offering a safe, structured environment for individuals to rebuild their lives from the ground up and maintain long-term sobriety. It is headquartered in DeLand, Florida, USA |
|||||
| Ransomware | takethehop.com id30944 View details | United States | Retail / E-commerce | ||
|
Takethehop.com operates in the retail and e-commerce sector, providing online shopping experiences to customers in the United States. As an e-commerce platform, it offers various products and services to its customers. Takethehop.com was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | takethehop.com id30944 View details | United States | Retail / E-commerce | ||
|
The HOP, an American regional public transit system operated by the Hill Country Transit District (HCTD). Founded in the 1960s in the state of Texas (USA) as a voluntary transportation service, the organization has grown over the decades into a major public public-transport network. |
|||||
| Ransomware | healthlawadvocates.org id30860 View details | United States | NGOs / Associations | ||
|
Health Law Advocates is a non-profit organization based in the United States, operating in the sector of NGOs and associations, providing advocacy services related to health law. The organization is focused on promoting access to healthcare and advocating for the rights of individuals in the healthcare system. Health Law Advocates was listed as a ransomware victim associated with incransom. |
|||||
| Ransomware | healthlawadvocates.org id30860 View details | United States | NGOs / Associations | ||
|
Health Law Advocates (HLA), an American non-profit, public interest law firm based in Boston, Massachusetts. Founded in 1996, HLA provides free (pro bono) legal representation to low-income residents and vulnerable populations who face barriers to accessing or paying for healthcare. |
|||||
| Ransomware | autismuslink.ch id30818 View details | Switzerland | NGOs / Associations | ||
|
Autismuslink.ch is a Swiss non-governmental organization that operates in the sector of NGOs and associations, providing support and resources for individuals with autism. Located in Switzerland, the organization offers various services and initiatives to promote awareness and inclusion. Autismuslink.ch was listed as a ransomware victim associated with incransom. |
|||||
| Ransomware | autismuslink.ch id30818 View details | Switzerland | NGOs / Associations | ||
|
The Stiftung Autismuslink (Autism Link Foundation), a Switzerland-based competence center dedicated to supporting adolescents and young adults with Autism Spectrum Disorder (ASD). Headquartered in Bern, the organization focuses on helping individuals with autism achieve social and professional integration. |
|||||
| Ransomware | cabincreekhealth.com id30816 View details | United States | Healthcare / Medicine | ||
|
Cabincreekhealth.com is a healthcare organization based in the United States, operating in the medicine sector. The entity provides various healthcare services to its patients. Cabincreekhealth.com was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | cabincreekhealth.com id30816 View details | United States | Healthcare / Medicine | ||
|
Cabin Creek Health Systems (CCHS), a non-profit community healthcare organization founded in 1973 by coal miners in West Virginia. It operates as a Federally Qualified Health Center (FQHC), providing comprehensive medical services to rural and urban residents across Kanawha County |
|||||
| Ransomware | Ali-Monde id30709 View details | United States | Other | ||
|
Ali-Monde is a company based in the United States, operating in the Other sector. The company's specific offerings are not well-documented, but it is known to be part of the diverse range of businesses in the US. Ali-Monde was listed as a ransomware victim associated with incransom. |
|||||
| Ransomware | Ali-Monde id30709 View details | United States | Other | ||
|
Ali-Monde is a food production and distribution company that's been around for over 50 years. They've got 5 of their own brands and an impressive lineup of 800+ dry, organic, and gluten-free products. Based just south of Montreal, they distribute food across Quebec, Ontario, New Brunswick, and parts of Western Canada. Ali-Monde is all about giving customers exactly what they want - tasty, diverse food products that meet different dietary needs. |
|||||
| Ransomware | v-silicon.com id30651 View details | Taiwan, Province of China | IT | ||
|
v-silicon.com is a company based in Taiwan, operating in the IT sector. The company likely provides various IT services and solutions to its clients. v-silicon.com was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | v-silicon.com id30651 View details | Taiwan, Province of China | IT | ||
|
威视芯半导体(合肥)有限公司 specializes in advanced audio and video processing technologies for the global smart TV and set-top box market. The company offers a range of products including high-definition smart TV chips and network camera chips, aimed at enhancing smart home, community, and city solutions. Their target clients include manufacturers in the smart display and visual technology sectors. 威视芯 is committed to driving innovation in the audio-visual industry |
|||||
| Ransomware | v-silicon.com id30651 View details | China | IT | ||
|
威视芯半导体(合肥)有限公司 specializes in advanced audio and video processing technologies for the global smart TV and set-top box market. The company offers a range of products including high-definition smart TV chips and network camera chips, aimed at enhancing smart home, community, and city solutions. Their target clients include manufacturers in the smart display and visual technology sectors. 威视芯 is committed to driving innovation in the audio-visual industry |
|||||
| Ransomware | FAST.COM.PH id30652 View details | Philippines | IT | ||
|
FAST.COM.PH is an IT company based in the Philippines, offering various services within the IT sector. The company operates in the Philippines, providing IT solutions to its clients. FAST.COM.PH was listed as a ransomware victim associated with incransom. |
|||||
| Ransomware | FAST.COM.PH id30652 View details | Philippines | IT | ||
|
FAST Logistics Group is a leading provider of end-to-end logistics and supply chain solutions in the Philippines, offering a comprehensive network of transport, warehousing, distribution, and logistics services. With over 50 years of experience, the company serves a diverse range of industries including FMCG, pharmaceuticals, and technology, enabling businesses of all sizes to expand their reach across the archipelago. Their innovative and sustainable solutions are designed to support business growth and ensure dependable operations at every stage of the supply chain. FAST Logistics Group is committed to helping clients navigate logistics challenges and achieve operational efficiency through tailored services and a strong nationwide presence. |
|||||
| Ransomware | D.MAG New Material Technology Co., Ltd. Taiwan Giant id30653 View details | Taiwan, Province of China | Manufacturing / Engineering | ||
|
D.MAG New Material Technology Co., Ltd. Taiwan Giant is a company based in Taiwan that operates in the manufacturing and engineering sector. The company is involved in the development and production of new materials and technologies. D.MAG New Material Technology Co., Ltd. Taiwan Giant was listed as a ransomware victim associated with incransom. |
|||||
| Ransomware | D.MAG New Material Technology Co., Ltd. Taiwan Giant id30653 View details | Taiwan, Province of China | Manufacturing / Engineering | ||
|
D.MAG New Material Technology Co., Ltd. is a key manufacturing subsidiary controlled by Taiwan’s Giant Group (Giant Manufacturing Co., Ltd.). Specializing in aluminum and magnesium alloys, D.MAG operates from Kunshan, Jiangsu Province, China, to develop and supply lightweight, high-performance materials and components for the bicycle, automotive, railway, and aerospace industries |
|||||
| Ransomware | vedan corp id30654 View details | Viet Nam | Agriculture / Food | ||
|
Vedan Corp is a Vietnam-based company operating in the agriculture and food sector, providing various products and services to the market. The company is involved in the production and distribution of food products, catering to the local and international markets. Vedan Corp was listed as a ransomware victim associated with IncranSom. |
|||||
| Ransomware | vedan corp id30654 View details | Viet Nam | Agriculture / Food | ||
|
Vedan Vietnam is a leading manufacturer specializing in a wide range of products including seasoning, starch, MSG, chemicals, and consumer goods. The company is committed to quality and safety, utilizing advanced technology and local agricultural resources to produce high-quality products. Their services also extend to port operations and frozen food offerings, catering to both domestic and international markets. Vedan Vietnam aims to meet the growing demand for natural and non-GMO food products while maintaining a strong focus on corporate social responsibility and environmental protection. |
|||||
| Ransomware | pokka.co id30655 View details | Singapore | Agriculture / Food | ||
|
Pokka.co is a company based in Singapore, operating in the agriculture and food sector. The company likely offers products and services related to food and beverages, given its location and industry. Pokka.co was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | pokka.co id30655 View details | Singapore | Agriculture / Food | ||
|
Founded in 1977 and headquartered in Central Singapore, Pokka Sg manufactures and markets a wide range of beverages |
|||||
| Ransomware | reatile.co.za id30656 View details | South Africa | Energy | ||
|
Reatile is an energy company based in South Africa, operating in the energy sector. The company provides various energy-related services. Reatile was listed as a ransomware victim associated with incransom. |
|||||
| Ransomware | reatile.co.za id30656 View details | South Africa | Energy | ||
|
Reatile Group is an innovative, black-owned investment holding company established in 2003, focusing on the energy, petrochemical, and industrial sectors in South Africa. The company aims to leverage growth opportunities within these industrial sectors of the South African economy. Reatile Group is committed to improving the quality of life for disadvantaged communities through its foundation. Their strategic vision emphasizes growth and development in key sectors. |
|||||
| Ransomware | V&P Nurseries id30657 View details | United States | Agriculture / Food | ||
|
V&P Nurseries is an entity operating in the agriculture and food sector in the United States. The company likely provides various products and services related to nurseries, such as plant cultivation and sales. V&P Nurseries was listed as a ransomware victim associated with incransom. |
|||||
| Ransomware | V&P Nurseries id30657 View details | United States | Agriculture / Food | ||
|
V&P Nurseries is an Arizona-based wholesale grower specializing in drought-tolerant, subtropical, and desert-adapted plants for landscapes across the Southwest. Established in 1978, the company operates production facilities and a tissue culture lab focused on sustainable, water-conservative horticulture. For more information, |
|||||
| Ransomware | Kyokuto Kaihatsu Kogyo id30637 View details | Japan | Manufacturing / Engineering | ||
|
Kyokuto Kaihatsu Kogyo is a Japanese company operating in the manufacturing and engineering sector. The company is based in Japan and provides various products and services related to its sector. Kyokuto Kaihatsu Kogyo was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | Kyokuto Kaihatsu Kogyo id30637 View details | Japan | Manufacturing / Engineering | ||
|
Kyokuto Kaihatsu Kogyo Co., Ltd. is a leading manufacturer specializing in special purpose vehicles such as dump trucks, tankers, and garbage collection vehicles. The company serves various sectors including construction, logistics, and environmental services, providing innovative solutions to meet diverse client needs. With a strong presence in both domestic and international markets, it aims to support sustainable infrastructure development. The company is committed to enhancing operational efficiency and environmental sustainability through its advanced technologies and services. |
|||||
| Ransomware | asa-international.com id30628 View details | United Kingdom | Finance / Legal / Insurance | ||
|
ASA International operates in the finance, legal, and insurance sector in the United Kingdom. The company provides various financial services to its clients. ASA International was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | asa-international.com id30628 View details | United Kingdom | Finance / Legal / Insurance | ||
|
ASA International is a major international microfinance institution operating across South Asia, Southeast Asia, and Africa. The company's shares are traded on the London Stock Exchange under the ticker symbol ASAI |
|||||
| Ransomware | asa-international.com id30628 View details | Netherlands | Finance / Legal / Insurance | ||
|
ASA International is a major international microfinance institution operating across South Asia, Southeast Asia, and Africa. The company's shares are traded on the London Stock Exchange under the ticker symbol ASAI |
|||||
| Ransomware | https://www.statebankofnauvoo.com/ id30603 View details | United States | Finance / Legal / Insurance | ||
|
State Bank of Nauvoo is a financial institution based in the US, operating in the finance and insurance sector. The bank provides various financial services to its customers. State Bank of Nauvoo was listed as a ransomware victim associated with incransom. |
|||||
| Ransomware | https://www.statebankofnauvoo.com/ id30603 View details | United States | Finance / Legal / Insurance | ||
|
State Bank of Nauvoo offers a range of banking services including deposit accounts, loans, and online banking solutions |
|||||
| Ransomware | Golden Glasko & Associates id30558 View details | United States | Finance / Legal / Insurance | ||
|
Golden Glasko & Associates is a US-based company operating in the finance, legal, and insurance sector, providing various services to its clients. The company is involved in financial, legal, and insurance operations, catering to a range of customers. Golden Glasko & Associates was listed as a ransomware victim associated with incransom. |
|||||
| Ransomware | Golden Glasko & Associates id30558 View details | United States | Finance / Legal / Insurance | ||
|
Golden Glasko Haddy and Associates, P.A. is a law firm based in Miami specializing in estate law, probate, guardianship, and trust issues. With over 70 years of combined experience, they provide services including estate planning, probate litigation, and trust administration. The firm aims to offer personalized legal strategies and tenacious advocacy to support clients throughout South Florida. They also offer free initial consultations to prospective clients seeking legal guidance. |
|||||
| Ransomware | VantagePoint Management & Autoclear id30555 View details | United States | Finance / Legal / Insurance | ||
|
VantagePoint Management & Autoclear operates in the finance, legal, and insurance sector in the United States, providing various financial services. The company's offerings cater to a range of clients within these sectors. VantagePoint Management & Autoclear was listed as a ransomware victim associated with incransom. |
|||||
| Ransomware | VantagePoint Management & Autoclear id30555 View details | United States | Finance / Legal / Insurance | ||
|
VantagePoint Capital Partners is a global venture investor established in 1996, focusing on energy innovation and efficiency. With over $4 billion under management, the company supports start-up to scale-up companies by providing capital, strategic resources, and partnership alliances. Headquartered in Silicon Valley, VantagePoint also has offices in Beijing, China, and maintains strategic partnerships worldwide. Their diverse portfolio includes a range of entrepreneurs and companies in the energy sector. |
|||||
| Ransomware | Aesthetic Surgical Images id30352 View details | United States | Healthcare / Medicine | ||
|
Aesthetic Surgical Images is a healthcare entity based in the US, operating in the medicine sector, offering surgical services. The company provides specialized medical care, focusing on aesthetic surgeries. Aesthetic Surgical Images was listed as a ransomware victim associated with incransom. |
|||||
| Ransomware | Aesthetic Surgical Images id30352 View details | United States | Healthcare / Medicine | ||
|
Aesthetic Surgical Images, a plastic surgery practice based in Omaha, NE, has been serving patients since 1968 and is known for its commitment to quality and integrity. The practice's medical records are managed by Morgan Records Management, which ensures compliance with state and federal laws regarding record retention and confidentiality. Patients can request their medical records through the practice's website, with a focus on providing a secure and efficient experience. Aesthetic Surgical Images aims to educate patients about their records and the importance of proper management. |
|||||
| Ransomware | tecnocurva.com.br id30305 View details | Brazil | IT | ||
|
Tecnocurva.com.br is a Brazilian IT company, presumably offering various technology-related services and solutions. As an entity in the IT sector, it likely provides a range of services including software development, consulting, and technology integration. Tecnocurva.com.br was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | tecnocurva.com.br id30305 View details | Brazil | IT | ||
|
Company operating in the automotive sector. Heavy and agricultural segment. Forming of tubes and welded assemblies. Tecnocurva manufactures curved, welded, and stamped tubular assemblies, structural and exhaust pipes, and stamped parts with high technical standards and a total focus on performance. |
|||||
| Ransomware | samberger24.de id30306 View details | Germany | Retail / E-commerce | ||
|
samberger24.de is a retail and e-commerce company based in Germany, offering various products and services to its customers. The company operates in the retail sector, providing online shopping experiences. samberger24.de was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | samberger24.de id30306 View details | Germany | Retail / E-commerce | ||
|
Samberger is a long-established medical supply store and sports and analysis center in Munich, offering orthopedic aids, shoe insoles and health products. |
|||||
| Ransomware | oakparkmi.gov id30237 View details | United States | Public Sector | ||
|
Oakparkmi.gov is a government website for the city of Oak Park, Michigan, in the United States, providing public services and information to its residents. As a public sector entity, it offers various municipal services and resources. Oakparkmi.gov was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | oakparkmi.gov id30237 View details | United States | Public Sector | ||
|
Oak Park, Michigan, is a vibrant, diverse inner-ring suburb of Metro Detroit located in Oakland County. Incorporated as a city in 1945, it spans 5.5 square miles and is home to roughly 30,000 residents. The city is currently experiencing a renaissance, transforming areas like the 11 Mile Road corridor into bustling hubs with breweries, restaurants, and new community spaces. |
|||||
| Ransomware | tambasa.com id30229 View details | Brazil | Other | ||
|
Tambasa.com is a Brazilian entity operating in the other sector, providing various offerings to its customers. Located in Brazil, the company is part of a diverse industry. Tambasa.com was listed as a ransomware victim associated with incransom. |
|||||
| Ransomware | tambasa.com id30229 View details | Brazil | Other | ||
|
Tambasa Atacadistas is one of the largest wholesale distributors in Brazil, operating primarily in the B2B marketplace. Founded in 1949, the company supplies retail stores, supermarkets, and construction shops across the entire national territory. |
|||||
| Ransomware | tricountyhs.org id30230 View details | United States | Healthcare / Medicine | ||
|
Tricountyhs.org is a healthcare organization based in the United States, providing medical services to its community. As a healthcare provider, it offers various medical services and treatments to patients. Tricountyhs.org was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | tricountyhs.org id30230 View details | United States | Healthcare / Medicine | ||
|
Flowers Early Learning (formerly known as Tri-County Head Start) is a non-profit 501(c)(3) organization providing free, high-quality early childhood education and family support services across Berrien, Cass, and Van Buren counties in Southwest Michigan. Funded by a federal grant through the Office of Head Start, the organization serves eligible families with children from birth to age five, as well as expectant mothers. |
|||||
| Ransomware | acworth-ga.gov id30231 View details | United States | Public Sector | ||
|
Acworth-ga.gov is a government website for the city of Acworth, Georgia, in the United States, providing various public services and information to its residents. As a public sector entity, it offers a range of services including community development, public works, and municipal administration. Acworth-ga.gov was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | acworth-ga.gov id30231 View details | United States | Public Sector | ||
|
Acworth is located in the foothills of the North Georgia mountains and is nestled along the banks of Lake Acworth and Lake Allatoona, hence its nickname “The Lake City.” The city boasts a rich history, a charming downtown, abundant outdoor recreational activities, a vibrant restaurant scene, and an active festival and events calendar. Acworth is one of the best, family-friendly destinations in the Atlanta region. |
|||||
| Ransomware | carvalima.com.br id30232 View details | Brazil | Retail / E-commerce | ||
|
Carvalima.com.br is a retail and e-commerce company based in Brazil, offering various products and services to its customers. As an e-commerce platform, it provides online shopping experiences for consumers in Brazil. Carvalima.com.br was listed as a ransomware victim associated with incransom. |
|||||
| Ransomware | carvalima.com.br id30232 View details | Brazil | Retail / E-commerce | ||
|
Carvalima Transportes is a specialized freight transportation company with over 35 years of experience, headquartered in Cuiabá, MT. The company operates in multiple regions, including Mato Grosso, Mato Grosso do Sul, Rondônia, Acre, and parts of Pará, as well as providing reverse logistics services across several states in Brazil. Their services include fractional cargo transport, dedicated cargo, e-commerce logistics, and air freight. |
|||||
| Ransomware | ezortea.com.br id30233 View details | Brazil | Retail / E-commerce | ||
|
Ezortea.com.br operates in the retail and e-commerce sector in Brazil, offering various products and services to its customers. As an e-commerce company, it provides online shopping experiences, leveraging digital platforms to reach its target audience. Ezortea.com.br was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | ezortea.com.br id30233 View details | Brazil | Retail / E-commerce | ||
|
Estrutural Zortea is a Brazilian company founded in 1995, specializing in the design, fabrication, and assembly of large-scale metal structures. ISO 9001-2015 certified, they provide industrial, logistics, and port solutions throughout the country. Specialties include: roofing for grain warehouses and industrial sheds, hoppers, silos, metal towers, and buildings. |
|||||
| Ransomware | hamilton-eye.com id30234 View details | United States | Healthcare / Medicine | ||
|
Hamilton Eye is a healthcare services provider based in the United States, offering medical services in the field of ophthalmology. As a healthcare provider, Hamilton Eye is dedicated to delivering quality patient care. Hamilton Eye was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | hamilton-eye.com id30234 View details | United States | Healthcare / Medicine | ||
|
Hamilton Eye Institute is a comprehensive vision care practice operating out of two Pennsylvania locations: Allentown and Easton. They provide routine eye exams, medical/surgical eye treatments, and an in-house MediSpa. |
|||||
| Ransomware | Colorado Rehabilitation and Occupational Medicine id30219 View details | United States | Healthcare / Medicine | ||
|
Colorado Rehabilitation and Occupational Medicine is a healthcare service provider in the US, specializing in rehabilitation and occupational medicine. The entity offers medical services to support patients in their recovery and return to work. Colorado Rehabilitation and Occupational Medicine was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | Colorado Rehabilitation and Occupational Medicine id30219 View details | United States | Healthcare / Medicine | ||
|
Colorado Rehabilitation & Occupational Medicine (CROM) is a leading Denver-area physiatry practice specializing in non-surgical treatments for musculoskeletal and neurological conditions. Founded in 1992, CROM operates multiple clinics across the Front Range, focusing on helping patients recover from sports, work, and auto injuries without narcotics or surgery. |
|||||
| Ransomware | https://www.roundshield.com/ id30164 View details | United Kingdom | Finance / Legal / Insurance | ||
|
Roundshield is a company based in the United Kingdom, operating in the finance, legal, and insurance sectors. The company provides various services to its clients. Roundshield was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | https://www.roundshield.com/ id30164 View details | United Kingdom | Finance / Legal / Insurance | ||
|
400gb |
|||||
| Ransomware | horizoneye.com id29998 View details | United States | IT | ||
|
Horizon Eye Care operates as a group of independent optometric clinics and medical practices across North America. Depending on your specific location, they offer comprehensive eye examinations, surgical procedures (like LASIK and cataracts), contact lens fittings, and a wide variety of designer eyeglasses. |
|||||
| Ransomware | https://sza.it/ id30132 View details | Italy | IT | ||
|
SZA IT is an Italian company operating in the IT sector, providing various services and solutions. The company is based in Italy and offers its expertise to clients in the region. SZA IT was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | https://sza.it/ id30132 View details | Italy | IT | ||
|
client, contracts, personal, NDA and other |
|||||
| Ransomware | GDN AR(Dorinka) id30089 View details | Argentina | Other | ||
|
GDN AR Dorinka operates in the other sector in Argentina, providing various offerings to its customers. As an entity in this sector, it plays a role in the country's economy. GDN AR Dorinka was listed as a ransomware victim associated with incransom. |
|||||
| Ransomware | GDN AR(Dorinka) id30089 View details | Argentina | Other | ||
|
Dorinka S.R.L. is based in Argentina, with the head office in Cidade Autonoma De Buenos Aires. The enterprise operates in the Grocery Stores industry. Dorinka S.R.L. was incorporated on June 29, 2026. There are currently 8,000 (2024) people employed by Dorinka S.R.L.. |
|||||
| Ransomware | callhorton.com id30044 View details | United States | Retail / E-commerce | ||
|
Callhorton.com is an e-commerce company based in the United States, operating in the retail sector. The company likely offers various products and services to its customers through its online platform. Callhorton.com was listed as a ransomware victim associated with incransom. |
|||||
| Ransomware | callhorton.com id30044 View details | United States | Retail / E-commerce | ||
|
Horton Personal Injury Lawyers is the premier law firm at not protecting it's clients confidential data. |
|||||
| Ransomware | johndufourlaw.com id30045 View details | United States | Finance / Legal / Insurance | ||
|
johndufourlaw.com is a law firm based in the United States, operating in the finance and legal sector. The firm likely provides legal services to clients in the finance and insurance industries. johndufourlaw.com was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | johndufourlaw.com id30045 View details | United States | Finance / Legal / Insurance | ||
|
If you find yourself injured, disabled or deep in debt, the Law Office of John Dufour is ready to help. John brings 25 years of focused experience and favorable outcomes. Our success is built on attentive service and attention to the legal details. |
|||||
| Ransomware | theswansonlawgroup.com id30046 View details | United States | Finance / Legal / Insurance | ||
|
The Swanson Law Group is a US-based law firm operating in the finance and legal sector, providing services to clients in the United States. As a legal services provider, the firm likely handles sensitive client information. The Swanson Law Group was listed as a ransomware victim associated with incransom. |
|||||
| Ransomware | theswansonlawgroup.com id30046 View details | United States | Finance / Legal / Insurance | ||
|
Meet Ben Swanson. The clients confidentiality worst nightmare. |
|||||
| Ransomware | Life Bridges id30028 View details | United States | Healthcare / Medicine | ||
|
Life Bridges is a healthcare organization based in the United States, providing medical services to patients. As a healthcare provider, Life Bridges plays a crucial role in the US healthcare sector. Life Bridges was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | Life Bridges id30028 View details | United States | Healthcare / Medicine | ||
|
Life Bridges is a non-profit organization dedicated to supporting individuals with intellectual and developmental disabilities, providing a range of services including residential support, healthcare, and community living services. Established in 1973, the organization focuses on promoting independence and dignity for its clients through tailored support and therapeutic services. Their intended clients include individuals with various developmental disabilities, as well as their families, ensuring a holistic approach to care and community involvement. Life Bridges is committed to bridging the gap between abilities and disabilities, fostering an inclusive environment where all individuals can thrive. |
|||||
| Ransomware | GSP Crop Science Pvt id30029 View details | India | Agriculture / Food | ||
|
GSP Crop Science Pvt is an Indian company operating in the agriculture and food sector, providing various offerings to support crop science. The company is based in India and focuses on agricultural solutions. GSP Crop Science Pvt was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | GSP Crop Science Pvt id30029 View details | India | Agriculture / Food | ||
|
GSP Crop Science Limited is a leader in agricultural innovation, specializing in crop science and sustainable farming solutions. The company offers a wide range of products including pesticides, herbicides, fungicides, and plant growth regulators, designed to enhance crop productivity while minimizing environmental impact. Their target clients include farmers and agricultural businesses seeking effective and reliable crop protection solutions. With a strong commitment to research and development, GSP aims to revolutionize agriculture and support farmers in achieving high-quality, healthy crops. |
|||||
| Ransomware | horizoneye.com id29998 View details | United States | IT | ||
|
Horizoneye.com is an IT company based in the United States, offering various services within the IT sector. As a US-based company, horizoneye.com operates within the IT industry, providing services to its clients. Horizoneye.com was listed as a ransomware victim associated with incransom |
|||||
| Ransomware | horizoneye.com id29998 View details | United States | IT | ||
|
Horizon Eye Care operates as a group of independent optometric clinics and medical practices across North America. Depending on your specific location, they offer comprehensive eye examinations, surgical procedures (like LASIK and cataracts), contact lens fittings, and a wide variety of designer eyeglasses. |
|||||
| Ransomware | belpointeasset.com \ belpointe.com id29978 View details | United States | Finance / Legal / Insurance | ||
|
Belpointe Asset Management, operating as belpointeasset.com and belpointe.com, is a financial services firm based in the United States, offering investment and asset management solutions to clients. The company operates within the finance, legal, and insurance sector, providing a range of services to its customers. Belpointe Asset Management was listed as a ransomware victim associated with incransom. |
|||||
| Ransomware | belpointeasset.com \ belpointe.com id29978 View details | United States | Finance / Legal / Insurance | ||
|
400gb |
|||||
| Ransomware | jktornel id30073 View details | Mexico | Other | ||
|
Unauthorized access has been gained to the company's confidential files, including client data, proprietary R&D, and financial documentation. |
|||||
| Ransomware | Newspaper Media Group id30069 View details | United States | Communication / Marketing | ||
|
Newspaper Media Group is a local news organization that provides comprehensive coverage of news, sports, entertainment, and community events across various regions, including Central Jersey and South Jersey. They publish multiple newspapers and magazines, ensuring that they reach more households than their competitors in nearly every zip code they cover. Their services are aimed at local communities, delivering news that is often not found elsewhere. With a commitment to connecting readers to the communities they care about, NMG stands out for its focus on local reporting. |
|||||
| Ransomware | Horizon Family Medical Group id29973 View details | United States | Healthcare / Medicine | ||
|
Horizon Family Medical Group A deep dive into 7 terabytes of internal data: from patient records to QuickBooks financial databases In the modern world, data is the new oil. For a medical organization like Horizon Family Medical Group, it is also the foundation of trust between doctor and patient. We have conducted an independent and complete audit of this organization's data security. The results are catastrophic. We are in possession of the company's entire digital footprint, totaling **7 terabytes**, which includes 1TB of file data and 6TB of mission-critical SQL and QuickBooks databases. The management of Horizon Family Medical Group was notified of their complete loss of data control. They chose silence. This blog exists to illuminate what they are desperately trying to hide. We will not be publishing the files. Yet. Instead, we will explain exactly what this data contains, so that every patient, employee, and partner can appreciate the full scale of the threat. The Patient, Dissected. What We Know About You Horizon Family Medical Group prides itself on a wide range of services, from primary care to specialized treatments. This range of services has now become a detailed vulnerability map for every single patient. Our data includes, but is not limited to: Primary Care: Complete visit histories, diagnoses, prescriptions, lab results, and physicians' private notes about your lifestyle, habits, and family status. Women's Health: Detailed information on gynecological exams, pregnancies, abortions, Pap smear results, STD diagnoses, and prescribed treatments. Everything you trusted only to your doctor. Behavioral Health: The most sensitive category. Diagnoses related to depression, anxiety disorders, bipolar disorder, and addiction. Full session notes from psychotherapists. Every antidepressant and antipsychotic prescription. This information can destroy careers, families, and social standing. Allergy and Immunology: Data on all your allergies, including reactions to specific medications. What happens when this information is lost or altered in your official medical file? Ophthalmology & Nutrition: Your eyeglass prescriptions, diagnoses like glaucoma and cataracts, as well as all your attempts to manage weight, documented eating disorders, and private recommendations from nutritionists. This isn't just 'data'. This is your life, cataloged and ready for use. Anatomy of a Business. A Financial Teardown of Horizon Family Medical Group It's a paradox that clinics, while collecting mountains of information, often fail to see the real picture of their own business. We see it. The 6 terabytes of SQL and QuickBooks databases represent the complete financial and operational model of Horizon Family Medical Group. We have analyzed: SQL Databases: These contain complete patient information, doctor schedules, office utilization, patient flow, average revenue per department and per doctor. We know which doctor is profitable and which is a liability. We see every operational metric management uses to make decisions. QuickBooks Databases: This is the financial heart of the company. Every transaction, employee salaries (including hidden executive bonuses), tax reports, debts, loans, and settlements with insurance companies and suppliers. We can see the true profit margin of every service, the customer acquisition cost (CAC), and their lifetime value (LTV). Horizon's management hasn't just lost patient data. They have lost complete control of their business. Any competitor with this information could dismantle their company by poaching their most profitable doctors and patients. Eternal Memory. Why This Data Will Never Disappear. Some believe a data breach is a temporary problem. In this case, it is not. We drew inspiration from the Arctic Code Vault project, where humanity's most critical code is preserved in permafrost for a thousand years. Your 7 terabytes of data are no longer just files on a server. They have been prepared for archival and distributed storage. They will become a digital monument to the negligence of Horizon Family Medical Group. This data cannot be 'deleted'. It will exist forever, as proof that the company's leadership failed to protect what is most sacred—your health and your privacy. To the management of Horizon Family Medical Group, we remind you: the clock is ticking. Your silence only magnifies the damage. Contact us. Your patients and your business deserve it. |
|||||
| Ransomware | neuwoges.de id29968 View details | Germany | Construction / Real Estate | ||
|
The Neubrandenburger Wohnungsgesellschaft mbH (NEUWOGES), a municipal housing company and subsidiary of the Vier-Tore-Stadt Neubrandenburg in Mecklenburg-Western Pomerania, Germany. It is one of the largest regional housing providers, managing around 12,000 apartments alongside commercial units and care facilities. It’s no secret that the company was subjected to a cyberattack and that data was stolen. But let’s pull back the curtain a bit. At first, the company’s leadership cut costs on proper IT infrastructure, and after the attack they continued to do so—this time at the expense of the security of their clients, employees, vendors, etc. Relying on the supervisory board, they attempted to obtain more information about the compromised data in order to protect themselves. Now you’re learning about this for free. Stay tuned. |
|||||
| Ransomware | jasperplastics.info id29934 View details | United States | Manufacturing / Engineering | ||
|
Jasper Plastics Solutions specializes in providing turn-key plastic and polyurethane solutions primarily for OEM manufacturers in the RV, Marine, Automotive, and Construction industries. Their product offerings include polyurethane thermal column blocks, fiberglass components, and innovative design boards that are weather-resistant and customizable. With nearly 20 years of experience, they utilize advanced manufacturing techniques, including a new HD Digital Division for large format printing, to create high-quality parts that mimic natural materials. Jasper Plastics is committed to delivering practical and innovative solutions tailored to the specific needs of their clients. Employees: 10 Revenue: $5 Million Industry: Manufacturing Phone Number: (574) 457-2062 |
|||||
| Ransomware | framesiprofessional.com id29935 View details | United States | IT | ||
|
Framesi specializes in creating and distributing professional hair products, including styling tools, color dyes, and hair treatments, exclusively for licensed stylists and salons. The company is dedicated to supporting the professional beauty industry by ensuring high-quality formulations that deliver reliable results. Framesi does not sell its products to retail chains or discount beauty outlets, maintaining a focus on professional use. Their offerings include a wide range of color products, care items, and styling solutions tailored for expert hands Employees: 200 Revenue: $25.1 Million Cosmetics, Beauty Supply & Personal Care Products Phone Number: (800) 321-9648 |
|||||
| Ransomware | smithassociatescpa.com id29895 View details | United States | Finance / Legal / Insurance | ||
|
smithassociatescpa.com Smith and Associates is a Certified Public Accounting Firm based in Maine, offering a comprehensive range of services including accounting, auditing, tax planning, and management advisory services. The firm caters to a diverse clientele, including individuals, corporations, partnerships, and non-profits in Maine and New Hampshire. They provide specialized support for business start-ups and QuickBooks, along with professional consulting in various areas of tax and accounting practices. Established in 1987, Smith and Associates is committed to being personable, knowledgeable, and responsive to their clients' needs. |
|||||
| Ransomware | Kewaunee Scientific id29786 View details | United States | Manufacturing / Engineering | ||
|
Total data: 504GB Contains: 852,141 Files, 120,670 Folders Documents: Clients KYS & NDA, Financial documentation, Contracts, Drawings, Audit reports, Personal data, Contractors and subcontractors information, Scanned documents and much other important information. Tape: confidential Clients: Pfizer, Rusan Pharma Ltd., Samsung and many other world-famous laboratories. full information will be released in a few weeks |
|||||
| Ransomware | Signazon_USA id29787 View details | United States | Retail / E-commerce | ||
|
Signazon.com was founded with the mission of providing the company's customers with the very best in printing. It's one thing to print fast and cheap - it's another thing to do that and do it well. The company believes in getting the little details right. From asking the company's customers the right questions to picking out different weights of paper, fine-tuning the company's printers for optimal quality to hand-checking every order several times throughout the production process, no stone is left unturned. And the company works hard every day to make sure that each and every customer gets the highest-quality, personalized products and service. With thousands of customers around the country, ranging from Fortune 500 companies to small business owners and even personal consumers, we've embraced the company's place as leaders at the innovative edge of the industry. We're constantly looking to improve and grow by streamlining the company's website, adding new products, and more. |
|||||