Ransomware Group intelligence

Incransom

Active

Track Incransom with 933 published victims and 7 known leak locations in a single intelligence view.

Victims 933 Known published victims in this dataset
First discovered 2023-08-09 Earliest victim discovery date
Last discovered 2026-07-28 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 518 victims
Known locations 7 Leak or negotiation infrastructure tracked

Overview

Incransom is tracked by Breach House as a ransomware group with 933 published victims.

United States is currently the most targeted country in this dataset.

7 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (7)

    Label Type Availability Links
    Leak location 1 Onion service Unknown incblog7vmuq7rktic73r4ha4j757m3ptym37tyvifzp2roedyyzzxid.onion
    Leak location 2 Onion service Unknown incbackrlasjesgpfu5brktfjknbqoahe2hhmqfhasc5fb56mtukn4yd.onion
    Leak location 3 Web location Unknown incbackend.top
    Leak location 4 Web location Unknown incapt.blog
    Leak location 5 Web location Unknown incapt.su
    Leak location 6 Onion service Unknown incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion
    Leak location 7 Onion service Unknown incbacg6bfwtrlzwdbqc55gsfl763s3twdtwhp27dzuik6s6rwdcityd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (933)

    Search, filter and paginate the victim timeline for Incransom. Showing 1–100 of 933.

    Type Target Discovered Country Business Category Intel Link
    Ransomware https://eclmn.com/ id31010 View details United States IT
    Ransomware https://eclmn.com/ id31010 View details United States IT
    Ransomware Della Casa Group AG id31009 View details Switzerland Construction / Real Estate
    Ransomware Della Casa Group AG id31009 View details Switzerland Construction / Real Estate
    Ransomware minigrip.com.mx id31005 View details Mexico Manufacturing / Engineering
    Ransomware minigrip.com.mx id31005 View details Mexico Manufacturing / Engineering
    Ransomware DUCON id31001 View details Colombia Other
    Ransomware DUCON id31001 View details Colombia Other
    Ransomware greenecountyga.gov id31002 View details United States Public Sector
    Ransomware greenecountyga.gov id31002 View details United States Public Sector
    Ransomware foundationstofreedom.org id31003 View details United States NGOs / Associations
    Ransomware foundationstofreedom.org id31003 View details United States NGOs / Associations
    Ransomware takethehop.com id30944 View details United States Retail / E-commerce
    Ransomware takethehop.com id30944 View details United States Retail / E-commerce
    Ransomware healthlawadvocates.org id30860 View details United States NGOs / Associations
    Ransomware healthlawadvocates.org id30860 View details United States NGOs / Associations
    Ransomware autismuslink.ch id30818 View details Switzerland NGOs / Associations
    Ransomware autismuslink.ch id30818 View details Switzerland NGOs / Associations
    Ransomware cabincreekhealth.com id30816 View details United States Healthcare / Medicine
    Ransomware cabincreekhealth.com id30816 View details United States Healthcare / Medicine
    Ransomware Ali-Monde id30709 View details United States Other
    Ransomware Ali-Monde id30709 View details United States Other
    Ransomware v-silicon.com id30651 View details Taiwan, Province of China IT
    Ransomware v-silicon.com id30651 View details Taiwan, Province of China IT
    Ransomware v-silicon.com id30651 View details China IT
    Ransomware FAST.COM.PH id30652 View details Philippines IT
    Ransomware FAST.COM.PH id30652 View details Philippines IT
    Ransomware D.MAG New Material Technology Co., Ltd. Taiwan Giant id30653 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware D.MAG New Material Technology Co., Ltd. Taiwan Giant id30653 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware vedan corp id30654 View details Viet Nam Agriculture / Food
    Ransomware vedan corp id30654 View details Viet Nam Agriculture / Food
    Ransomware pokka.co id30655 View details Singapore Agriculture / Food
    Ransomware pokka.co id30655 View details Singapore Agriculture / Food
    Ransomware reatile.co.za id30656 View details South Africa Energy
    Ransomware reatile.co.za id30656 View details South Africa Energy
    Ransomware V&P Nurseries id30657 View details United States Agriculture / Food
    Ransomware V&P Nurseries id30657 View details United States Agriculture / Food
    Ransomware Kyokuto Kaihatsu Kogyo id30637 View details Japan Manufacturing / Engineering
    Ransomware Kyokuto Kaihatsu Kogyo id30637 View details Japan Manufacturing / Engineering
    Ransomware asa-international.com id30628 View details United Kingdom Finance / Legal / Insurance
    Ransomware asa-international.com id30628 View details United Kingdom Finance / Legal / Insurance
    Ransomware asa-international.com id30628 View details Netherlands Finance / Legal / Insurance
    Ransomware https://www.statebankofnauvoo.com/ id30603 View details United States Finance / Legal / Insurance
    Ransomware https://www.statebankofnauvoo.com/ id30603 View details United States Finance / Legal / Insurance
    Ransomware Golden Glasko & Associates id30558 View details United States Finance / Legal / Insurance
    Ransomware Golden Glasko & Associates id30558 View details United States Finance / Legal / Insurance
    Ransomware VantagePoint Management & Autoclear id30555 View details United States Finance / Legal / Insurance
    Ransomware VantagePoint Management & Autoclear id30555 View details United States Finance / Legal / Insurance
    Ransomware Aesthetic Surgical Images id30352 View details United States Healthcare / Medicine
    Ransomware Aesthetic Surgical Images id30352 View details United States Healthcare / Medicine
    Ransomware tecnocurva.com.br id30305 View details Brazil IT
    Ransomware tecnocurva.com.br id30305 View details Brazil IT
    Ransomware samberger24.de id30306 View details Germany Retail / E-commerce
    Ransomware samberger24.de id30306 View details Germany Retail / E-commerce
    Ransomware oakparkmi.gov id30237 View details United States Public Sector
    Ransomware oakparkmi.gov id30237 View details United States Public Sector
    Ransomware tambasa.com id30229 View details Brazil Other
    Ransomware tambasa.com id30229 View details Brazil Other
    Ransomware tricountyhs.org id30230 View details United States Healthcare / Medicine
    Ransomware tricountyhs.org id30230 View details United States Healthcare / Medicine
    Ransomware acworth-ga.gov id30231 View details United States Public Sector
    Ransomware acworth-ga.gov id30231 View details United States Public Sector
    Ransomware carvalima.com.br id30232 View details Brazil Retail / E-commerce
    Ransomware carvalima.com.br id30232 View details Brazil Retail / E-commerce
    Ransomware ezortea.com.br id30233 View details Brazil Retail / E-commerce
    Ransomware ezortea.com.br id30233 View details Brazil Retail / E-commerce
    Ransomware hamilton-eye.com id30234 View details United States Healthcare / Medicine
    Ransomware hamilton-eye.com id30234 View details United States Healthcare / Medicine
    Ransomware Colorado Rehabilitation and Occupational Medicine id30219 View details United States Healthcare / Medicine
    Ransomware Colorado Rehabilitation and Occupational Medicine id30219 View details United States Healthcare / Medicine
    Ransomware https://www.roundshield.com/ id30164 View details United Kingdom Finance / Legal / Insurance
    Ransomware https://www.roundshield.com/ id30164 View details United Kingdom Finance / Legal / Insurance
    Ransomware horizoneye.com id29998 View details United States IT
    Ransomware https://sza.it/ id30132 View details Italy IT
    Ransomware https://sza.it/ id30132 View details Italy IT
    Ransomware GDN AR(Dorinka) id30089 View details Argentina Other
    Ransomware GDN AR(Dorinka) id30089 View details Argentina Other
    Ransomware callhorton.com id30044 View details United States Retail / E-commerce
    Ransomware callhorton.com id30044 View details United States Retail / E-commerce
    Ransomware johndufourlaw.com id30045 View details United States Finance / Legal / Insurance
    Ransomware johndufourlaw.com id30045 View details United States Finance / Legal / Insurance
    Ransomware theswansonlawgroup.com id30046 View details United States Finance / Legal / Insurance
    Ransomware theswansonlawgroup.com id30046 View details United States Finance / Legal / Insurance
    Ransomware Life Bridges id30028 View details United States Healthcare / Medicine
    Ransomware Life Bridges id30028 View details United States Healthcare / Medicine
    Ransomware GSP Crop Science Pvt id30029 View details India Agriculture / Food
    Ransomware GSP Crop Science Pvt id30029 View details India Agriculture / Food
    Ransomware horizoneye.com id29998 View details United States IT
    Ransomware horizoneye.com id29998 View details United States IT
    Ransomware belpointeasset.com \ belpointe.com id29978 View details United States Finance / Legal / Insurance
    Ransomware belpointeasset.com \ belpointe.com id29978 View details United States Finance / Legal / Insurance
    Ransomware jktornel id30073 View details Mexico Other
    Ransomware Newspaper Media Group id30069 View details United States Communication / Marketing
    Ransomware Horizon Family Medical Group id29973 View details United States Healthcare / Medicine
    Ransomware neuwoges.de id29968 View details Germany Construction / Real Estate
    Ransomware jasperplastics.info id29934 View details United States Manufacturing / Engineering
    Ransomware framesiprofessional.com id29935 View details United States IT
    Ransomware smithassociatescpa.com id29895 View details United States Finance / Legal / Insurance
    Ransomware Kewaunee Scientific id29786 View details United States Manufacturing / Engineering
    Ransomware Signazon_USA id29787 View details United States Retail / E-commerce