incransom
Also known as: Inc RansomFirst seen August 9, 2023Active999 claimed victims
The claims below are reproduced as posted by incransom on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
INC Ransom is a prolific ransomware-as-a-service operation active since July 2023 that systematically targets healthcare, government, education, and manufacturing sectors in North America and Europe, having posted over 200 victims in 2025 alone with no sector off-limits.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| APRO Asian Protection Pte Ltd | February 25, 2026 | ransomware_live | — |
| WE Fitness | February 25, 2026 | ransomware_live | — |
| https://daricon.com/ | February 25, 2026 | ransomware_live | — |
| https://daricon.com/ (military US/CA/NATO) | February 25, 2026 | ransomware_live | — |
| Rainier Clinical Research Center | February 23, 2026 | ransomware_live | — |
| The City of Cocoa | February 23, 2026 | ransomware_live | — |
| TESTCOMPANY | February 21, 2026 | ransomware_live | — |
| polymedicure.com | February 20, 2026 | ransomware_live | — |
| Valgo SA | February 19, 2026 | ransomware_live | — |
| meridenct.gov | February 18, 2026 | ransomware_live | — |
| farbank.com (flywatertravel) | February 17, 2026 | ransomware_live | — |
| Hiwassee Builder Supply | February 17, 2026 | ransomware_live | — |
| Ondine Biomedical | February 16, 2026 | ransomware_live | — |
| ACS Accountancy | February 16, 2026 | ransomware_live | — |
| Nang Kuang Pharmaceutical Co., Ltd. | February 15, 2026 | ransomware_live | — |
| acwapower.com \ https://www.larsentoubro.com/ | February 15, 2026 | ransomware_live | — |
| Bitgo | February 14, 2026 | ransomware_live | — |
| primepak.com | February 13, 2026 | ransomware_live | — |
| lohmann-tapes.com | February 12, 2026 | ransomware_live | — |
| rswater.ae | February 12, 2026 | ransomware_live | — |
| Midwestern Oil & Gas | February 12, 2026 | ransomware_live | — |
| auxhomeservices.com | February 11, 2026 | ransomware_live | — |
| Core Supply | February 10, 2026 | ransomware_live | — |
| tuftco | February 9, 2026 | ransomware_live | — |
| aircotedivoire.com | February 6, 2026 | ransomware_live | — |
| AOT Japan | February 5, 2026 | ransomware_live | — |
| lke-group.com | February 4, 2026 | ransomware_live | — |
| Western New York Energy | February 3, 2026 | ransomware_live | — |
| saturnmachine.net | February 3, 2026 | ransomware_live | — |
| csi-ri.com | February 3, 2026 | ransomware_live | — |
| www.pucobre.cl | February 2, 2026 | ransomware_live | — |
| ChokChey Finance | February 2, 2026 | ransomware_live | — |
| H-Behbehani Brothers WLL | February 2, 2026 | ransomware_live | — |
| Foamtec International | February 1, 2026 | ransomware_live | — |
| Blystone & Bailey | February 1, 2026 | ransomware_live | — |
| Beacon Mutual Insurance | January 31, 2026 | ransomware_live | — |
| Hawk Law Group | January 31, 2026 | ransomware_live | — |
| pacepacific.com | January 31, 2026 | ransomware_live | — |
| DIEHL & CELLA ADVOGADOS ASSOCIADOS | January 30, 2026 | ransomware_live | — |
| PK PINHÃO & KOIFFMAN ATTORNEYS AT LAW | January 30, 2026 | ransomware_live | — |
| denmark.k12.wi.us | January 29, 2026 | ransomware_live | — |
| DeRenzis & Associates | January 28, 2026 | ransomware_live | — |
| LGBTQ Center Orange county | January 28, 2026 | ransomware_live | — |
| JLK Rosenberger | January 28, 2026 | ransomware_live | — |
| distinctive-systems.com | January 28, 2026 | ransomware_live | — |
| newkirklaw.com | January 27, 2026 | ransomware_live | — |
| Callagy Law Firm | January 27, 2026 | ransomware_live | — |
| nbccministries.org | January 27, 2026 | ransomware_live | — |
| anagnosdoor.com | January 27, 2026 | ransomware_live | — |
| Uniflex Technology Inc | January 26, 2026 | ransomware_live | — |
| The Trevino Group, Inc | January 26, 2026 | ransomware_live | — |
| www.shrimphouse.com | January 25, 2026 | ransomware_live | — |
| OAB | January 23, 2026 | ransomware_live | — |
| tob-bmw.sk | January 23, 2026 | ransomware_live | — |
| goldair.gr | January 23, 2026 | ransomware_live | — |
| Elmore Goldsmith Kelley & deHoll | January 22, 2026 | ransomware_live | — |
| minorsgardencenter.com | January 21, 2026 | ransomware_live | — |
| Sandberg | January 20, 2026 | ransomware_live | — |
| MKC Customs Brokers International Inc. | January 18, 2026 | ransomware_live | — |
| Southern Alberta Community Living Association | January 18, 2026 | ransomware_live | — |
| excavationtourigny.ca | January 18, 2026 | ransomware_live | — |
| cirrusaviation | January 16, 2026 | ransomware_live | — |
| ecsc.org | January 16, 2026 | ransomware_live | — |
| https://trustarholdingsllc.com/ https://vistlabs.com/ | January 14, 2026 | ransomware_live | — |
| moultriesheriff.com | January 14, 2026 | ransomware_live | — |
| Fit-Line Global | January 13, 2026 | ransomware_live | — |
| Rodney's Sign Company | January 13, 2026 | ransomware_live | — |
| stimgroup | January 13, 2026 | ransomware_live | — |
| gbmme.com | January 13, 2026 | ransomware_live | — |
| Ju Teng International Holdings Ltd | January 13, 2026 | ransomware_live | — |
| https://acswinc.com/ | January 13, 2026 | ransomware_live | — |
| Rod Danielson | January 12, 2026 | ransomware_live | — |
| Harrison Design | January 12, 2026 | ransomware_live | — |
| CompactInd | January 10, 2026 | ransomware_live | — |
| Foshee Architecture | January 10, 2026 | ransomware_live | — |
| The Carlson Law Firm | January 9, 2026 | ransomware_live | — |
| FFKR Architects | January 9, 2026 | ransomware_live | — |
| https://lpollockpr.com/ | January 6, 2026 | ransomware_live | — |
| https://bellowsmfg.com/company/ | January 5, 2026 | ransomware_live | — |
| atchadwick.net | January 4, 2026 | ransomware_live | — |
| Automation One Business Systems Inc | January 3, 2026 | ransomware_live | — |
| proton-system_Serbia | January 3, 2026 | ransomware_live | — |
| Best Attorneys | January 2, 2026 | ransomware_live | — |
| https://www.precisioncoating.com/ | January 1, 2026 | ransomware_live | — |
| 3GH Informatica Integral | December 31, 2025 | ransomware_live | — |
| Burnham Brown | December 31, 2025 | ransomware_live | — |
| OSI Systems, Inc. | December 30, 2025 | ransomware_live | — |
| Cape Fear Country Club | December 29, 2025 | ransomware_live | — |
| klingele | December 28, 2025 | ransomware_live | — |
| omrania | December 28, 2025 | ransomware_live | — |
| selp | December 28, 2025 | ransomware_live | — |
| ttmet.co.th | December 26, 2025 | ransomware_live | — |
| WSI | December 24, 2025 | ransomware_live | — |
| Evercover | December 21, 2025 | ransomware_live | — |
| Talarico | December 21, 2025 | ransomware_live | — |
| maisonlaw.com | December 19, 2025 | ransomware_live | — |
| deerfield.com (singulargenomics.com) | December 18, 2025 | ransomware_live | — |
| Pacific Rim Mechanical | December 18, 2025 | ransomware_live | — |
| glasserstv.com | December 18, 2025 | ransomware_live | — |
| eagrealtyinternational.com | December 18, 2025 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).