incransom
Also known as: Inc RansomFirst seen August 9, 2023Active951 claimed victims
The claims below are reproduced as posted by incransom on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
INC Ransom is a prolific ransomware-as-a-service operation active since July 2023 that systematically targets healthcare, government, education, and manufacturing sectors in North America and Europe, having posted over 200 victims in 2025 alone with no sector off-limits.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| JLK Rosenberger | January 28, 2026 | ransomware_live | — |
| distinctive-systems.com | January 28, 2026 | ransomware_live | — |
| newkirklaw.com | January 27, 2026 | ransomware_live | — |
| Callagy Law Firm | January 27, 2026 | ransomware_live | — |
| nbccministries.org | January 27, 2026 | ransomware_live | — |
| anagnosdoor.com | January 27, 2026 | ransomware_live | — |
| Uniflex Technology Inc | January 26, 2026 | ransomware_live | — |
| The Trevino Group, Inc | January 26, 2026 | ransomware_live | — |
| www.shrimphouse.com | January 25, 2026 | ransomware_live | — |
| OAB | January 23, 2026 | ransomware_live | — |
| tob-bmw.sk | January 23, 2026 | ransomware_live | — |
| goldair.gr | January 23, 2026 | ransomware_live | — |
| Elmore Goldsmith Kelley & deHoll | January 22, 2026 | ransomware_live | — |
| minorsgardencenter.com | January 21, 2026 | ransomware_live | — |
| Sandberg | January 20, 2026 | ransomware_live | — |
| MKC Customs Brokers International Inc. | January 18, 2026 | ransomware_live | — |
| Southern Alberta Community Living Association | January 18, 2026 | ransomware_live | — |
| excavationtourigny.ca | January 18, 2026 | ransomware_live | — |
| cirrusaviation | January 16, 2026 | ransomware_live | — |
| ecsc.org | January 16, 2026 | ransomware_live | — |
| https://trustarholdingsllc.com/ https://vistlabs.com/ | January 14, 2026 | ransomware_live | — |
| moultriesheriff.com | January 14, 2026 | ransomware_live | — |
| Fit-Line Global | January 13, 2026 | ransomware_live | — |
| Rodney's Sign Company | January 13, 2026 | ransomware_live | — |
| stimgroup | January 13, 2026 | ransomware_live | — |
| gbmme.com | January 13, 2026 | ransomware_live | — |
| Ju Teng International Holdings Ltd | January 13, 2026 | ransomware_live | — |
| https://acswinc.com/ | January 13, 2026 | ransomware_live | — |
| Rod Danielson | January 12, 2026 | ransomware_live | — |
| Harrison Design | January 12, 2026 | ransomware_live | — |
| CompactInd | January 10, 2026 | ransomware_live | — |
| Foshee Architecture | January 10, 2026 | ransomware_live | — |
| The Carlson Law Firm | January 9, 2026 | ransomware_live | — |
| FFKR Architects | January 9, 2026 | ransomware_live | — |
| https://lpollockpr.com/ | January 6, 2026 | ransomware_live | — |
| https://bellowsmfg.com/company/ | January 5, 2026 | ransomware_live | — |
| atchadwick.net | January 4, 2026 | ransomware_live | — |
| Automation One Business Systems Inc | January 3, 2026 | ransomware_live | — |
| proton-system_Serbia | January 3, 2026 | ransomware_live | — |
| Best Attorneys | January 2, 2026 | ransomware_live | — |
| https://www.precisioncoating.com/ | January 1, 2026 | ransomware_live | — |
| 3GH Informatica Integral | December 31, 2025 | ransomware_live | — |
| Burnham Brown | December 31, 2025 | ransomware_live | — |
| OSI Systems, Inc. | December 30, 2025 | ransomware_live | — |
| Cape Fear Country Club | December 29, 2025 | ransomware_live | — |
| klingele | December 28, 2025 | ransomware_live | — |
| omrania | December 28, 2025 | ransomware_live | — |
| selp | December 28, 2025 | ransomware_live | — |
| ttmet.co.th | December 26, 2025 | ransomware_live | — |
| WSI | December 24, 2025 | ransomware_live | — |
| Evercover | December 21, 2025 | ransomware_live | — |
| Talarico | December 21, 2025 | ransomware_live | — |
| maisonlaw.com | December 19, 2025 | ransomware_live | — |
| deerfield.com (singulargenomics.com) | December 18, 2025 | ransomware_live | — |
| Pacific Rim Mechanical | December 18, 2025 | ransomware_live | — |
| glasserstv.com | December 18, 2025 | ransomware_live | — |
| eagrealtyinternational.com | December 18, 2025 | ransomware_live | — |
| svlawus.com | December 18, 2025 | ransomware_live | — |
| bclawoffices.com | December 18, 2025 | ransomware_live | — |
| CVK Hotels & Resorts_Turkey | December 17, 2025 | ransomware_live | — |
| Precise Benefits Group LLC | December 16, 2025 | ransomware_live | — |
| stignatiusijamsville.org | December 16, 2025 | ransomware_live | — |
| shawhillprimaryschool.org.uk | December 16, 2025 | ransomware_live | — |
| beycelik | December 13, 2025 | ransomware_live | — |
| www.hfplanners.com | December 12, 2025 | ransomware_live | — |
| rainbowtel.net | December 10, 2025 | ransomware_live | — |
| YAZAKI Corp | December 7, 2025 | ransomware_live | — |
| Foxconn Interconnect Technology Limited (FIT) | December 7, 2025 | ransomware_live | — |
| www.mylawcompany.com | December 6, 2025 | ransomware_live | — |
| bennett.edu | December 5, 2025 | ransomware_live | — |
| www.precipiodx.com | December 2, 2025 | ransomware_live | — |
| www.enea.com | December 1, 2025 | ransomware_live | — |
| oxfordshop.com.au | December 1, 2025 | ransomware_live | — |
| American Pools & Spas | December 1, 2025 | ransomware_live | — |
| steelworksinc.ca | November 29, 2025 | ransomware_live | — |
| cityofsignalhill.org | November 28, 2025 | ransomware_live | — |
| PFMI | November 27, 2025 | ransomware_live | — |
| ITL Systemhaus | November 26, 2025 | ransomware_live | — |
| FIT | November 26, 2025 | ransomware_live | — |
| Schmidt's | November 25, 2025 | ransomware_live | — |
| omegatoolcorp.com | November 24, 2025 | ransomware_live | — |
| Southern Lion Sdn Bhd | November 24, 2025 | ransomware_live | — |
| cryopur.com | November 24, 2025 | ransomware_live | — |
| TBTEAM | November 22, 2025 | ransomware_live | — |
| Woom GmbH | November 21, 2025 | ransomware_live | — |
| sandiegowarroom.com | November 20, 2025 | ransomware_live | — |
| naffco.com | November 19, 2025 | ransomware_live | — |
| zadroinc.com | November 18, 2025 | ransomware_live | — |
| https://avenira.com/ | November 17, 2025 | ransomware_live | — |
| www.northcroftme.com | November 14, 2025 | ransomware_live | — |
| Kaan Cronenberg & Partners Law | November 14, 2025 | ransomware_live | — |
| duboiswood.com | November 13, 2025 | ransomware_live | — |
| facadeinnovations.com.au | November 13, 2025 | ransomware_live | — |
| instyle.com.au | November 13, 2025 | ransomware_live | — |
| Wiraswasta Gemilang | November 12, 2025 | ransomware_live | — |
| forensicmed.com | November 12, 2025 | ransomware_live | — |
| bridge-housing-corp | November 12, 2025 | ransomware_live | — |
| latamlex (gyg.local) | November 12, 2025 | ransomware_live | — |
| KohaFoods Hawaii | November 12, 2025 | ransomware_live | — |
| www.modcomedia.com | November 11, 2025 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).