// THREAT ACTOR
INC-RANSOM_
ActiveINC Ransom is a ransomware operation active since mid-2023, known for double-extortion attacks across healthcare, government, and education.
For Ransomnews editorial coverage of INC-RANSOM — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.
872
Victims tracked
3 / 10
Active mirrors
2023-08-09
First listing
2026-08-06
Most recent
Victims by year
- 2026 292
- 2025 369
- 2024 165
- 2023 46
Leak site mirrors
10 mirrors tracked, 3 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.
-
incblog7vmuq7rktic73r4ha4j757m3ptym37tyvifzp2roedyyzzxid.onionINC Ransom snapshot · 2024-07-10 02:01 -
incapt.blogAccess Blocked snapshot · 2024-04-03 06:07 -
incapt.suError Response Page snapshot · 2024-07-22 11:02 -
incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onionDisclosures snapshot · 2026-08-06 21:16 -
incpaysp74dphcbjyvg2eepxnl3tkgt5mq5vd4tnjusoissz342bdnad.onionsnapshot · 2024-12-10 04:25 -
incpaykabjqc2mtdxq6c23nqh4x6m5dkps5fr6vgdkgzp5njssx6qkid.onionNULL snapshot · 2026-08-06 21:12 -
incbacg6bfwtrlzwdbqc55gsfl763s3twdtwhp27dzuik6s6rwdcityd.onionsnapshot · 2026-08-06 21:38 -
incbackend.topsnapshot · 2025-01-02 00:03 -
incbackfgm7qa7sioq7r4tdunoaqsvzjg5i7w46bhqlfonwjgiemr7qd.onionsnapshot · 2024-12-11 09:59 -
incbackrlasjesgpfu5brktfjknbqoahe2hhmqfhasc5fb56mtukn4yd.onionsnapshot · 2024-12-11 09:59
Recent victims
The 50 most recent victims claimed by INC-RANSOM. Total in the index: 872.
| Date listed | Victim | Description |
|---|---|---|
| 2026-08-06 | vprj.org | |
| 2026-08-05 | lantisnet.com | |
| 2026-08-05 | Loyalist College | |
| 2026-08-05 | TRULITE GLASS & ALUMINUM SOLUTIONS | |
| 2026-08-04 | clintonhealthaccess.org | |
| 2026-08-04 | pushidrosal.id | |
| 2026-08-04 | lccgroup.com | |
| 2026-08-04 | https://geleximco.vn/ | |
| 2026-08-02 | ecfa.org | |
| 2026-08-02 | quantinuum.com | |
| 2026-07-30 | PARTNERED HEALTH GROUP | |
| 2026-07-30 | sslf.local | |
| 2026-07-29 | harwal.net | |
| 2026-07-28 | Della Casa Group AG | |
| 2026-07-28 | https://eclmn.com/ | |
| 2026-07-28 | minigrip.com.mx | |
| 2026-07-28 | DUCON | |
| 2026-07-28 | greenecountyga.gov | |
| 2026-07-28 | foundationstofreedom.org | |
| 2026-07-27 | takethehop.com | |
| 2026-07-26 | healthlawadvocates.org | |
| 2026-07-24 | autismuslink.ch | |
| 2026-07-23 | cabincreekhealth.com | |
| 2026-07-20 | Ali-Monde | |
| 2026-07-18 | v-silicon.com | |
| 2026-07-18 | FAST.COM.PH | |
| 2026-07-18 | D.MAG New Material Technology Co., Ltd. Taiwan Giant | |
| 2026-07-18 | vedan corp | |
| 2026-07-18 | pokka.co | |
| 2026-07-18 | reatile.co.za | |
| 2026-07-18 | V&P Nurseries | |
| 2026-07-17 | Kyokuto Kaihatsu Kogyo | |
| 2026-07-16 | asa-international.com | |
| 2026-07-16 | https://www.statebankofnauvoo.com/ | |
| 2026-07-14 | VantagePoint Management & Autoclear | |
| 2026-07-14 | Golden Glasko & Associates | |
| 2026-07-07 | Aesthetic Surgical Images | |
| 2026-07-07 | tecnocurva.com.br | |
| 2026-07-07 | samberger24.de | |
| 2026-07-03 | oakparkmi.gov | |
| 2026-07-02 | tambasa.com | |
| 2026-07-02 | tricountyhs.org | |
| 2026-07-02 | acworth-ga.gov | |
| 2026-07-02 | carvalima.com.br | |
| 2026-07-02 | ezortea.com.br | |
| 2026-07-02 | hamilton-eye.com | |
| 2026-07-02 | Colorado Rehabilitation and Occupational Medicine | |
| 2026-07-02 | https://www.roundshield.com/ | |
| 2026-06-30 | https://sza.it/ | |
| 2026-06-29 | GDN AR(Dorinka) |