Ransomware Group intelligence

Incransom

Active

Track Incransom with 933 published victims and 7 known leak locations in a single intelligence view.

Victims 933 Known published victims in this dataset
First discovered 2023-08-09 Earliest victim discovery date
Last discovered 2026-07-28 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 518 victims
Known locations 7 Leak or negotiation infrastructure tracked

Overview

Incransom is tracked by Breach House as a ransomware group with 933 published victims.

United States is currently the most targeted country in this dataset.

7 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (7)

    Label Type Availability Links
    Leak location 1 Onion service Unknown incblog7vmuq7rktic73r4ha4j757m3ptym37tyvifzp2roedyyzzxid.onion
    Leak location 2 Onion service Unknown incbackrlasjesgpfu5brktfjknbqoahe2hhmqfhasc5fb56mtukn4yd.onion
    Leak location 3 Web location Unknown incbackend.top
    Leak location 4 Web location Unknown incapt.blog
    Leak location 5 Web location Unknown incapt.su
    Leak location 6 Onion service Unknown incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion
    Leak location 7 Onion service Unknown incbacg6bfwtrlzwdbqc55gsfl763s3twdtwhp27dzuik6s6rwdcityd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (933)

    Search, filter and paginate the victim timeline for Incransom. Showing 601–700 of 933.

    Type Target Discovered Country Business Category Intel Link
    Ransomware MTTEXPERTISES.COM id20502 View details Morocco Services
    Ransomware Nunez Dental id20501 View details United States Healthcare / Pharma
    Ransomware Kittery Police Department id20500 View details United States Public Sector
    Ransomware iscamen id20453 View details Argentina Agriculture / Food
    Ransomware cemeteries.local id20437 View details Canada Communication / Marketing
    Ransomware Funktel GmbH id20436 View details Germany Communication / Marketing
    Ransomware Sandhills Medical Foundation id20406 View details United States Healthcare / Pharma
    Ransomware valuestoreit id20384 View details United States Retail / E-commerce
    Ransomware Universidad Técnica del Norte Ecuador id20383 View details Ecuador Other
    Ransomware mysfa.org id20360 View details United States Services
    Ransomware Jordan Drug id20336 View details United States Healthcare / Pharma
    Ransomware oxparkrec.org id20228 View details United States Communication / Marketing
    Ransomware piercecountylibrary.org id20189 View details United States Public Sector
    Ransomware Rivers Academy West London id20165 View details United Kingdom Education
    Ransomware The Vascular Experts id20150 View details United States Healthcare / Pharma
    Ransomware nissi-beach.com id20092 View details Cyprus Hospitality / Food & Beverage / Tourism
    Ransomware alpha-steuer.de id20091 View details Germany Services
    Ransomware npfy.org id20090 View details United States Education
    Ransomware finanzconsult-immobilien.de id20089 View details Germany Communication / Marketing
    Ransomware www.davisdavisco.com id20088 View details United States Energy
    Ransomware ros.eu id20087 View details Germany IT
    Ransomware ccrcda.org id20086 View details United States Communication / Marketing
    Ransomware south african airways (flysaa.com) id20031 View details South Africa Transportation / Travel / Logistics
    Ransomware GARDNER ORTHOPEDICS id20019 View details United States Healthcare / Pharma
    Ransomware StudioVaiani id19659 View details Italy Finance / Legal / Insurance
    Ransomware The Saint James Hospital Group id19656 View details Malta Healthcare / Pharma
    Ransomware Hpital Glengarry Memorial Hospital (clglen.local) id19626 View details Canada Healthcare / Pharma
    Ransomware arkansasprimarycare.com id19328 View details United States Communication / Marketing
    Ransomware lemi-group id19310 View details Italy Healthcare / Pharma
    Ransomware franklin nursing home id19295 View details United States Healthcare / Pharma
    Ransomware Koninklijke Ahold Delhaize N.V. id19206 View details Netherlands Communication / Marketing
    Ransomware iblinfo.de id19181 View details Germany Manufacturing / Engineering
    Ransomware trocaire.edu id19165 View details United States Education
    Ransomware Orthopaedic Specialists of Connecticut id19146 View details United States Healthcare / Pharma
    Ransomware MENTAL HEALTH id19145 View details United States Healthcare / Pharma
    Ransomware Chickenshed id19110 View details United Kingdom Communication / Marketing
    Ransomware Imagineering Finishing Technologies id19096 View details United States IT
    Ransomware inspec-international.com id19082 View details United States IT
    Ransomware silocaf.com id19073 View details United States Communication / Marketing
    Ransomware chesterfieldtwp.org id19072 View details United States Communication / Marketing
    Ransomware finetech.de id19071 View details Germany IT
    Ransomware ccso2014.local(sheriffs) id19057 View details United States Public Sector
    Ransomware Coop57 id19038 View details Spain Finance / Legal / Insurance
    Ransomware Thiekon Constructie id19036 View details Netherlands Manufacturing / Engineering
    Ransomware The Loretto Hospital id18898 View details United States Healthcare / Pharma
    Ransomware bahnlog.com id18801 View details United States Transportation / Travel / Logistics
    Ransomware importantsteps.com id18800 View details United States Communication / Marketing
    Ransomware augustssons.se id18765 View details Sweden Manufacturing / Engineering
    Ransomware City of Fort St. John (city.cityfsj.local) id18741 View details Canada Public Sector
    Ransomware TriCity Family Services id18724 View details United States Services
    Ransomware TMT Clam Dredger id18664 View details United States Other
    Ransomware allbiz.com id18663 View details United States Retail / E-commerce
    Ransomware abeyor.fr id18626 View details France Communication / Marketing
    Ransomware bellendorf.de id18575 View details Germany Communication / Marketing
    Ransomware warmsworth.doncaster.sch.uk id18516 View details United Kingdom Education
    Ransomware alphaoil.ca id18515 View details Canada Energy
    Ransomware newhollandwood.com id18511 View details United States Retail / E-commerce
    Ransomware gaertnerhof-jeutter.de id18489 View details Germany NGOs / Associations
    Ransomware expertdata.com.au id18486 View details Australia Services
    Ransomware airtelligence.com id18485 View details United States Communication / Marketing
    Ransomware sitro.com.au id18446 View details Australia Manufacturing / Engineering
    Ransomware yeanshalle.de id18426 View details Germany Other
    Ransomware Bancroft Wines id18415 View details United Kingdom Communication / Marketing
    Ransomware wmk-hvb.de id18330 View details Germany Healthcare / Pharma
    Ransomware Essex County OB/GYN Associates id18320 View details United States Healthcare / Pharma
    Ransomware emperors.edu id18287 View details United States Healthcare / Pharma
    Ransomware wog-kaiserbaeder.de id18286 View details Germany Other
    Ransomware BerksBar.org id18285 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware williampevear.com id18284 View details United States Communication / Marketing
    Ransomware baldaufarchitekten.de id18283 View details Germany Communication / Marketing
    Ransomware State Bar of Texas (www.texasbar.com) id18280 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Greenwood Village South GVS id18279 View details United States Services
    Ransomware Naples Heritage Golf & Country Club id18217 View details United States Communication / Marketing
    Ransomware germancentre.sg id18115 View details Singapore Services
    Ransomware breakawayconcretecutting.com id18114 View details Chad Construction / Real Estate
    Ransomware sublettecountywy.gov id18087 View details United States Public Sector
    Ransomware megamtls.com id17792 View details Canada Communication / Marketing
    Ransomware evergreenpnw.com id17706 View details United States NGOs / Associations
    Ransomware teamsters175.org id17703 View details United States Communication / Marketing
    Ransomware statesideseattle.com id17690 View details United States Public Sector
    Ransomware californiaclingpeaches.com id17665 View details United States Agriculture / Food
    Ransomware ehdd.com id17654 View details United States Education
    Ransomware lavi.co.il id17606 View details Israel Hospitality / Food & Beverage / Tourism
    Ransomware pyasolutions.com id17605 View details Canada Services
    Ransomware Persante Health Care id17562 View details United States Healthcare / Pharma
    Ransomware Northeast Delta Human Services Authority id17542 View details United States Services
    Ransomware City of McKinney id17541 View details United States Public Sector
    Ransomware The Children's Center Of Hamden id17418 View details United States Communication / Marketing
    Ransomware Boldon James id16995 View details United Kingdom Communication / Marketing
    Ransomware air europa id16994 View details Spain Transportation / Travel
    Ransomware tnlottery.com id16993 View details United States Education
    Ransomware Turning Leaf (TURNINGLEAF.local) id16984 View details United States Healthcare / Pharma
    Ransomware Heart to Heart Hospice id16983 View details United States Services
    Ransomware City Of Beloit id16981 View details United States Public Sector
    Ransomware Menominee Tribal Clinic id16969 View details United States Healthcare / Pharma
    Ransomware Mission Locale Montpellier id16968 View details France Other
    Ransomware broward.edu id16959 View details United States Education
    Ransomware cnnindonesia.com id16949 View details Indonesia Hospitality / Food & Beverage / Tourism
    Ransomware lhps.org id16940 View details United States Education
    Ransomware Prinston Pharmaceutical (huahaius.com) id16938 View details United States Healthcare / Pharma