Ransomware Group intelligence

Incransom

Active

Track Incransom with 933 published victims and 7 known leak locations in a single intelligence view.

Victims 933 Known published victims in this dataset
First discovered 2023-08-09 Earliest victim discovery date
Last discovered 2026-07-28 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 518 victims
Known locations 7 Leak or negotiation infrastructure tracked

Overview

Incransom is tracked by Breach House as a ransomware group with 933 published victims.

United States is currently the most targeted country in this dataset.

7 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (7)

    Label Type Availability Links
    Leak location 1 Onion service Unknown incblog7vmuq7rktic73r4ha4j757m3ptym37tyvifzp2roedyyzzxid.onion
    Leak location 2 Onion service Unknown incbackrlasjesgpfu5brktfjknbqoahe2hhmqfhasc5fb56mtukn4yd.onion
    Leak location 3 Web location Unknown incbackend.top
    Leak location 4 Web location Unknown incapt.blog
    Leak location 5 Web location Unknown incapt.su
    Leak location 6 Onion service Unknown incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion
    Leak location 7 Onion service Unknown incbacg6bfwtrlzwdbqc55gsfl763s3twdtwhp27dzuik6s6rwdcityd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (933)

    Search, filter and paginate the victim timeline for Incransom. Showing 701–800 of 933.

    Type Target Discovered Country Business Category Intel Link
    Ransomware International AIDS Vaccine Initiative (iavi.org) id16871 View details United States Communication / Marketing
    Ransomware starkaerospace.com id16777 View details United States Communication / Marketing
    Ransomware RETAL Baltic Films id16745 View details Cyprus Communication / Marketing
    Ransomware Washington Gastroenterology (DHSWA.NET) id16697 View details United States Energy
    Ransomware Kilgore College (kilgore.edu) id16696 View details United States Education
    Ransomware peponline.org id16695 View details Communication / Marketing
    Ransomware Taylor Regional Hospital (thcg.local) id16694 View details United States Healthcare / Pharma
    Ransomware Regina Coeli Convent id16693 View details Communication / Marketing
    Ransomware Onecare id16630 View details United States Services
    Ransomware Biomedical Caledonia Medical Laboratory (calmedlab.local) id16629 View details Jamaica Healthcare / Pharma
    Ransomware Imperial Valley Respite (ivrespite.com) id16628 View details United States Construction / Real Estate
    Ransomware Riverina Medical id16627 View details Australia Healthcare / Pharma
    Ransomware Spectrum id16626 View details Australia Healthcare / Pharma
    Ransomware depewgillen.com id16560 View details United States Other
    Ransomware fwmep.edu id16541 View details United States Healthcare / Pharma
    Ransomware Youth Eastside Services id16536 View details United States Services
    Ransomware falp.org id16415 View details Switzerland Other
    Ransomware Inner City Family Health Team (ICFHT.local) id16412 View details Canada Communication / Marketing
    Ransomware Primary Health Services Center id16411 View details United States Healthcare / Pharma
    Ransomware Haji Husein Alireza id15956 View details Saudi Arabia Construction / Real Estate
    Ransomware Arc Community Services Inc id15902 View details United States Services
    Ransomware Black Creek Community Health Centre (bcch.local) id15901 View details Canada Healthcare / Pharma
    Ransomware McKibbin id15785 View details Ireland Construction / Real Estate
    Ransomware NHS Alder Hey id15716 View details United Kingdom Healthcare / Pharma
    Ransomware visufarma.com id15707 View details Netherlands Agriculture / Food
    Ransomware formpipe.com id15663 View details Sweden Communication / Marketing
    Ransomware borohradek id15619 View details Czechia Public Sector
    Ransomware atfservices.com.au id15618 View details Australia Services
    Ransomware aclaser.com.au id15617 View details Australia Services
    Ransomware Nicholsons Solicitors id15616 View details United Kingdom Finance / Legal / Insurance
    Ransomware Hadwins Volkswagen id15615 View details United Kingdom Communication / Marketing
    Ransomware Pastor Real Estate id15602 View details United Kingdom Construction / Real Estate
    Ransomware Sa.SS Datentechnik id15601 View details Germany IT
    Ransomware Service Avicole JGL id15594 View details Canada Communication / Marketing
    Ransomware Darlington EMS id15593 View details United Kingdom Healthcare / Pharma
    Ransomware Schuck-Gruppe id15592 View details Germany Construction / Real Estate
    Ransomware IPE Engwicht id15585 View details Germany Public Sector
    Ransomware Alna-Bioscience id15582 View details Germany Healthcare / Pharma
    Ransomware Goldsmith & Hull id15569 View details United States Finance / Legal / Insurance
    Ransomware Brueck Golosow Kim & Associates id15568 View details United States Healthcare / Pharma
    Ransomware United Bakery Equipment id15567 View details United States Communication / Marketing
    Ransomware Zimmerei Buder id15562 View details Austria Services
    Ransomware PBS AEROSPACE id15533 View details United States Communication / Marketing
    Ransomware PHARMATIS-SAS id15344 View details France Healthcare / Pharma
    Ransomware vbuzrt.hu id15221 View details Hungary Finance / Legal / Insurance
    Ransomware europe-qualité id15208 View details France Public Sector
    Ransomware ucv.es id15203 View details Spain Communication / Marketing
    Ransomware Webb Institute id15162 View details United States Education
    Ransomware San Francisco Ballet id15141 View details United States Communication / Marketing
    Ransomware Doctors Regional Cancer Center id14722 View details United States Healthcare / Pharma
    Ransomware Storck-Baugesellschaft mbH id14605 View details Germany Construction / Real Estate
    Ransomware Quantum Healthcare id14558 View details Singapore Healthcare / Pharma
    Ransomware Divine Interprises INC id14497 View details United States Communication / Marketing
    Ransomware DINAS Corp id14496 View details United States Communication / Marketing
    Ransomware Direct Access Partners id14481 View details United States Services
    Ransomware Visionary Homes id14398 View details United States Construction / Real Estate
    Ransomware Nusser Mineralöl GmbH id14373 View details Germany Other
    Ransomware OnePoint Patient Care id14290 View details United States Healthcare / Pharma
    Ransomware Cathedral Prep (villalan.edu) id14257 View details United States Communication / Marketing
    Ransomware Regent Care Center id14250 View details United States Communication / Marketing
    Ransomware E-Z Pack Holdings LLC id14231 View details United States Communication / Marketing
    Ransomware San Francisco Sheriff's Department (sjcso.local) id14139 View details United States Public Sector
    Ransomware ERoko Distributors + Colonial Countertops id14136 View details United States Communication / Marketing
    Ransomware The University and College Union id13980 View details United Kingdom Education
    Ransomware Health Quality Council id13971 View details Canada Healthcare / Pharma
    Ransomware HL Lawson & Sons id13966 View details United Kingdom Transportation / Travel / Logistics
    Ransomware Don’t Waste Group id13948 View details United Kingdom Services
    Ransomware Larc id13937 View details United States Communication / Marketing
    Ransomware Boombah Inc. id13749 View details Dominican Republic Communication / Marketing
    Ransomware HP Distribution id13689 View details United States Communication / Marketing
    Ransomware Norther n Bedford County School District (nbcsc.org) id13532 View details Public Sector
    Ransomware maingroup id13487 View details Ireland Hospitality / Food & Beverage / Tourism
    Ransomware Association Management Strategies(AAMC.local) id13476 View details United States Services
    Ransomware CIMP.COM id13475 View details United States Healthcare / Pharma
    Ransomware A.L.P. Lighting Components id13403 View details United States Manufacturing / Engineering
    Ransomware The Coffee Bean & Tea Leaf id13336 View details United States Retail / E-commerce
    Ransomware State of Alabama - Alabama Department Of Education id13335 View details Public Sector
    Ransomware erne id13334 View details Communication / Marketing
    Ransomware REPLIGEN id13294 View details United States Communication / Marketing
    Ransomware Guhring USA id13288 View details United States Communication / Marketing
    Ransomware Center for Human Capital Innovation (centerforhci.org) id13277 View details United States Communication / Marketing
    Ransomware waupacacounty-wi.gov id13276 View details United States Public Sector
    Ransomware waupaca.wi.us id13275 View details United States Public Sector
    Ransomware a4hs-dom.local id13209 View details Healthcare / Pharma
    Ransomware Puyallup Tribe (ptoi.local) id13201 View details India Public Sector
    Ransomware City Of Coon Rapids id13200 View details United States Public Sector
    Ransomware Cambridge University Press & Assessment id13199 View details United States Communication / Marketing
    Ransomware GBA GROUP id13191 View details Germany Transportation / Travel / Logistics
    Ransomware Planar id13161 View details United States Communication / Marketing
    Ransomware middletown-township.org id13147 View details United States Other
    Ransomware Maryhaven (MHCLINICAL.LOCAL) id13100 View details United States Healthcare / Pharma
    Ransomware Sacred Heart Community Service (shcstheheart.org) id13086 View details United States Communication / Marketing
    Ransomware Gorrie-Regan id13085 View details United States Communication / Marketing
    Ransomware Behavioral Health Response (bhr.local) id13073 View details United States Healthcare / Pharma
    Ransomware DERBY SCHOOL id13066 View details United States Education
    Ransomware OCEANAIR id13056 View details United States Transportation / Travel / Logistics
    Ransomware Sensory Spectrum id13049 View details United States Services
    Ransomware Kito Canada id13005 View details Canada Public Sector
    Ransomware Rockford Public School District id12937 View details United States Education
    Ransomware CONTROLNET id12936 View details United States Construction / Real Estate