incransom
Also known as: Inc RansomFirst seen August 9, 2023Active999 claimed victims
The claims below are reproduced as posted by incransom on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
INC Ransom is a prolific ransomware-as-a-service operation active since July 2023 that systematically targets healthcare, government, education, and manufacturing sectors in North America and Europe, having posted over 200 victims in 2025 alone with no sector off-limits.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| bereskinparr.com smartbiggar.ca | October 21, 2026 | ransomware_live | — |
| centralrogers.com | October 20, 2026 | ransomware_live | — |
| Seetelhotels.de | October 19, 2026 | ransomware_live | — |
| nowaszkola.com | October 15, 2026 | ransomware_live | — |
| www.coopecaja.fi.cr | October 15, 2026 | ransomware_live | — |
| verveba.com \ www.att.com | October 15, 2026 | ransomware_live | — |
| fairfeelegalservices.com | October 15, 2026 | ransomware_live | — |
| FINANCIAMENTO LTDA | October 14, 2026 | ransomware_live | — |
| Great Lakes | October 13, 2026 | ransomware_live | — |
| brookslawfirm.com | October 12, 2026 | ransomware_live | — |
| hsc.mb.ca | October 10, 2026 | ransomware_live | — |
| The New Community School | October 7, 2026 | ransomware_live | — |
| architekt-vondanwitz.de | October 6, 2026 | ransomware_live | — |
| harborpacific.com | October 6, 2026 | ransomware_live | — |
| acmestamping.com | October 6, 2026 | ransomware_live | — |
| magnals.com | October 6, 2026 | ransomware_live | — |
| Sangre de Cristo Electric Association | October 1, 2026 | ransomware_live | — |
| Post Metal Recycling | October 1, 2026 | ransomware_live | — |
| Northern Counties Health Care | October 1, 2026 | ransomware_live | — |
| Den Hartog Industries | October 1, 2026 | ransomware_live | — |
| Guardian Pharmacy LLC | October 1, 2026 | ransomware_live | — |
| Rimrock Foundation | October 1, 2026 | ransomware_live | — |
| bcx.co.za | September 29, 2026 | ransomware_live | — |
| bakemyday.se | September 28, 2026 | ransomware_live | — |
| nsbsd.org | September 28, 2026 | ransomware_live | — |
| AHEAD | September 28, 2026 | ransomware_live | — |
| pharma5.ma | September 25, 2026 | ransomware_live | — |
| Grupo Caberj | September 24, 2026 | ransomware_live | — |
| ukbjja.org | September 24, 2026 | ransomware_live | — |
| welgenone.com | September 24, 2026 | ransomware_live | — |
| bnlawmacau.com www.bn-ip.com | September 24, 2026 | ransomware_live | — |
| Lemon Law | September 23, 2026 | ransomware_live | — |
| Maryann Kriger | September 21, 2026 | ransomware_live | — |
| SECOND HOUSE | September 21, 2026 | ransomware_live | — |
| www.kendallhunt.com | September 18, 2026 | ransomware_live | — |
| www.roancampingholidays.com | September 18, 2026 | ransomware_live | — |
| www.diarco.com.ar | September 17, 2026 | ransomware_live | — |
| www.appliancefactory.com | September 17, 2026 | ransomware_live | — |
| jms building corporation | September 10, 2026 | ransomware_live | — |
| https://mediengruppethiel.de/ | September 9, 2026 | ransomware_live | — |
| cullottalaw.com | September 9, 2026 | ransomware_live | — |
| Wellness Partners network(combined revenue) | September 7, 2026 | ransomware_live | — |
| myglobal.com | September 3, 2026 | ransomware_live | — |
| myglobal.com | September 3, 2026 | ransomlook | — |
| Metales Panamericanos | September 2, 2026 | ransomlook | — |
| Multiver Ltée | September 2, 2026 | ransomlook | — |
| Policlinico Triestino | September 2, 2026 | ransomlook | — |
| Trucka | September 2, 2026 | ransomlook | — |
| Westfield Public School District | September 2, 2026 | ransomlook | — |
| Asfaltos y Pavimentos S.A. (Asfalpasa) | September 2, 2026 | ransomlook | — |
| specialtytextile.com | September 2, 2026 | ransomlook | — |
| specialtytextile.com | September 1, 2026 | ransomware_live | — |
| Metales Panamericanos | September 1, 2026 | ransomware_live | — |
| Multiver Ltée | September 1, 2026 | ransomware_live | — |
| Policlinico Triestino | September 1, 2026 | ransomware_live | — |
| Trucka | September 1, 2026 | ransomware_live | — |
| Westfield Public School District | September 1, 2026 | ransomware_live | — |
| Asfaltos y Pavimentos S.A. (Asfalpasa) | September 1, 2026 | ransomware_live | — |
| cimbsecurities.com | August 31, 2026 | ransomware_live | — |
| www.renorefractories.com | August 31, 2026 | ransomware_live | — |
| www.lichtvision.com | August 31, 2026 | ransomware_live | — |
| zummocorp.com | August 31, 2026 | ransomware_live | — |
| New Century Ophthalmology Group | August 31, 2026 | ransomware_live | — |
| New Century Ophthalmology Group | August 31, 2026 | ransomlook | — |
| FFKR Architects | August 31, 2026 | ransomlook | — |
| cimbsecurities.com | August 31, 2026 | ransomlook | — |
| www.renorefractories.com | August 31, 2026 | ransomlook | — |
| www.lichtvision.com | August 31, 2026 | ransomlook | — |
| zummocorp.com | August 31, 2026 | ransomlook | — |
| wittmann | August 29, 2026 | ransomware_live | — |
| wittmann | August 29, 2026 | ransomlook | — |
| Oilquip Inc | August 29, 2026 | ransomlook | — |
| Oilquip Inc | August 28, 2026 | ransomware_live | — |
| Ruby Seven Studios | August 27, 2026 | ransomware_live | — |
| Rohloff Group | August 27, 2026 | ransomware_live | — |
| BENCIVIL | August 27, 2026 | ransomware_live | — |
| Ruby Seven Studios | August 27, 2026 | ransomlook | — |
| Rohloff Group | August 27, 2026 | ransomlook | — |
| BENCIVIL | August 27, 2026 | ransomlook | — |
| el-group | August 22, 2026 | ransomware_live | — |
| EXEL | August 19, 2026 | ransomware_live | — |
| CDGARVINLAW | August 19, 2026 | ransomware_live | — |
| UNIPLASTICS.COM | August 19, 2026 | ransomware_live | — |
| BANGKOKCABLE | August 19, 2026 | ransomware_live | — |
| Third Coast Bancshares | August 18, 2026 | ransomware_live | — |
| SD Associates Sdn Bhd | August 18, 2026 | ransomware_live | — |
| Foresee Pharmaceuticals | August 18, 2026 | ransomware_live | — |
| nyklawfirm.com nyk.ae | August 18, 2026 | ransomware_live | — |
| ssf-int.com ssf-ing.de | August 18, 2026 | ransomware_live | — |
| SpearFin Ltd | August 18, 2026 | ransomware_live | — |
| Lansing Urgent Care | August 16, 2026 | ransomware_live | — |
| cambrialawfirm.com | August 13, 2026 | ransomware_live | — |
| https://pacific-construction.com/ | August 13, 2026 | ransomware_live | — |
| stuartandassociates.com | August 12, 2026 | ransomware_live | — |
| diabetesandmetabolism.com | August 12, 2026 | ransomware_live | — |
| BEDC.COM.AU | August 12, 2026 | ransomware_live | — |
| gamaus.com | August 12, 2026 | ransomware_live | — |
| clgroup | August 12, 2026 | ransomware_live | — |
| Otter Tail County, Minnesota | August 11, 2026 | ransomware_live | — |
| Louisville Bar Association | August 8, 2026 | ransomware_live | — |
Page 1 of 10Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).