THREAT ACTOR
INC-RANSOM_
ActiveINC Ransom is a ransomware operation active since mid-2023, known for double-extortion attacks across healthcare, government, and education.
For Ransomnews editorial coverage of INC-RANSOM, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
1,014
Victims tracked
2 / 13
Active mirrors
2023-08-09
First listing
2026-11-11
Most recent
Victims by year
- 2026 434
- 2025 369
- 2024 165
- 2023 46
Leak site mirrors
13 mirrors tracked, 2 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
incblog7vmuq7rktic73r4ha4j757m3ptym37tyvifzp2roedyyzzxid.onionINC Ransom snapshot · 2024-07-10 02:01 -
incapt.blogAccess Blocked snapshot · 2024-04-03 06:07 -
incapt.suError Response Page snapshot · 2024-07-22 11:02 -
incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onionDisclosures snapshot · 2026-10-28 18:06 -
incpaysp74dphcbjyvg2eepxnl3tkgt5mq5vd4tnjusoissz342bdnad.onionsnapshot · 2024-12-10 04:25 -
incpaykabjqc2mtdxq6c23nqh4x6m5dkps5fr6vgdkgzp5njssx6qkid.onionNULL snapshot · 2026-11-11 18:00 -
incbacg6bfwtrlzwdbqc55gsfl763s3twdtwhp27dzuik6s6rwdcityd.onionsnapshot · 2026-11-11 17:00 -
incbackend.topsnapshot · 2025-01-02 00:03 -
incbackfgm7qa7sioq7r4tdunoaqsvzjg5i7w46bhqlfonwjgiemr7qd.onionsnapshot · 2024-12-11 09:59 -
incbackrlasjesgpfu5brktfjknbqoahe2hhmqfhasc5fb56mtukn4yd.onionsnapshot · 2024-12-11 09:59 -
incblog4uttkxd6b4grii6k2qcj2tn5k37seep5xto3dlghyqla7u7qd.onionINC | Blog snapshot · 2026-11-11 18:02 -
incs3epmz6eeyq7yo4lqdrxutfwtwgltkck3vp2xvs3ueoy4njiowqqd.onionsnapshot · 2026-11-11 14:00 -
incblog4uttkxd6b4grii6k2qcj2tn5k37seep5xto3dlghyqla7u7qd.onionsnapshot · 2026-11-11 01:00
Recent victims
The 50 most recent victims claimed by INC-RANSOM. Total in the index: 1,014.
| Date listed | Victim | Description |
|---|---|---|
| 2026-11-11 | https://www.jnattorney.com/ | 3 TB of data, 200,000 passports from various countries, and 800,000 fi… |
| 2026-11-10 | Roane Transportation Services | # ROANE TRANSPORTATION SERVICES, INC. ## Rockwood, Tennessee | DOT# 6… |
| 2026-11-10 | Kolin | # Kolin Construction **Kolin Construction** (*Kolin İnşaat Turizm S… |
| 2026-11-10 | Nota Groep | notagroep.nl |
| 2026-11-10 | Millimed Thailand (i-HERB) | # MILLIMED CO., LTD. (มิลลิเมด) — DATA BREACH DISCLOSURE **Date Add… |
| 2026-11-10 | HONG BAO GROUP (lovelywines.co.th) | # HONG BAO GROUP — DATA BREACH **Hong Bao Group** (หงเปา กรุ๊ป) — a… |
| 2026-11-10 | Onmion LLC (Lake Connor Park, Port Susan Camping Club, Cured by Visconti) | # Onmion LLC — One IT Provider, Three Breached Companies, 3,000+ Victi… |
| 2026-11-10 | Nandan Terry Pvt | # NANDAN TERRY LTD — DATA BREACH ANNOUNCEMENT **Industry:** Textile… |
| 2026-11-10 | La Filipina Uy Gongco | # La Filipina Uy Gongco Corporation (LFUGGOC) — Philippines **Publi… |
| 2026-11-10 | ZIRNET LLC (mmplumbingny.com alpha1usa.com askconstruction.com mmplumbingny.com tristate-s | # ZIRNET LLC — Managed Service Provider — FULL BREACH **Published:*… |
| 2026-11-10 | ELITDATA SE (Advokatfirman Kurt Lundberg HB,Artwood AB,Mantum Group) | # Elitdata i Varberg AB — Complete Infrastructure Breach **Publishe… |
| 2026-11-10 | PT Forisa Nusapersada | # PT Forisa Nusapersada **Industry:** Food & Beverage Manufacturing… |
| 2026-11-10 | 2F1JV | 2F1JV is a nonprofit joint venture between VINCI Construction Grands P… |
| 2026-11-10 | www.avoltaworld.com | Avolta is a global retail company specializing in convenience stores a… |
| 2026-11-10 | American Council of Education | # American Council on Education — Data Breach Disclosure **Publishe… |
| 2026-11-10 | https://www.polyvista.com | PolyVista offers innovative solutions designed to enhance the customer… |
| 2026-11-10 | Coopecaja | full |
| 2026-11-10 | Association «ENSEMBLE» | # Ensemble Boutancourt Ensemble Boutancourt is a website related to… |
| 2026-11-10 | ÖVERUM AGRO | # Company Analysis of Overum Agro ## General Information - **Comp… |
| 2026-11-10 | Stadtwerke Waldbröl GmbH | # Stadtwerke Waldbröl ## Company Description Stadtwerke Waldbröl… |
| 2026-11-10 | Gator Works Computing (Smith Law Firm, Beauchamp Edwards Epas, Wise Accounting Tax Service | # Gator Works Computing Inc. — Massive Client Data Breach Exposes Thou… |
| 2026-11-10 | Somervell County | Evidence of the data's existence is attached. |
| 2026-11-10 | J.E.T.S. Limited (MultiLink/ACH) | J.E.T.S. Limited — operator of the MultiLink/ACH payment switch, Kings… |
| 2026-11-10 | Bcpsystems | Southern California’s Full Service Electronics Manufacturing and Repai… |
| 2026-11-10 | dunbarandboardman | Dunbar and Boardman, a trusted name and a premier consultancy speciali… |
| 2026-11-10 | D.L. Steiner, Inc | Since 1988, D.L. Steiner’s quality services and responsive customer su… |
| 2026-11-10 | Previous Clients | ### Dump Of Documents Of Previous Clients List of targets: ``` Bene… |
| 2026-11-10 | www.rppclaw.com | Richardson, Pullen & Buck, P.C. is a law firm headquartered in Fillmor… |
| 2026-11-10 | www.retailinmotion.com | Retail InMotion specializes in onboard retail solutions for airlines, … |
| 2026-11-10 | Shenwan Hongyuan | # Shenwan Hongyuan (Hong Kong) Holdings Limited — 申万宏源(香港) **Listed… |
| 2026-11-10 | www.tannerclinic.com | Tanner Clinic is a physician-owned healthcare provider in Utah, offeri… |
| 2026-11-10 | Pomer & Boccia Professional | Pomer & Boccia, is a well established Ontario law firm that has extens… |
| 2026-11-10 | Patel Panchal | Welcome to PATEL & PANCHAL, Chartered Accountants. The One-Stop hub… |
| 2026-11-10 | coeur mining inc | Hacked. Coming soon... |
| 2026-11-10 | Chaney Monge School | Chaney Monge School 400 Elsie Ave. Crest Hill, IL. 60403 District 8… |
| 2026-11-10 | Ken Cai EMPIRE (Minco Silver, HempNova and other) | # THE KEN CAI EMPIRE ## Minco Silver Corporation (TSX:MSV) | HempNova… |
| 2026-11-10 | www.sdcc.net | Stoke Damerel is a vibrant and forward-thinking community of teachers … |
| 2026-11-10 | Beaver County PA | Beaver County is a county in the Commonwealth of Pennsylvania. The cou… |
| 2026-11-10 | Kalahari Resorts | # Kalahari Resorts and Conventions **Industry:** Hospitality / Indo… |
| 2026-11-10 | PANAX Group | # PANAX GROUP / UKSEUNG Chemical (욱성화학) — South Korea **Industry:**… |
| 2026-11-10 | Computacenter (Pivot Technology Solutions & Sigma Solutions) | Enc |
| 2026-11-10 | audacie.com — Audacie Inc. | # Audacie Inc. **Industry:** Accounting, Audit, Tax Advisory, Legal… |
| 2026-11-10 | CIMSA LOGISTICS | In the warehousing logistics business for over 20 years, we provide be… |
| 2026-11-10 | HELP Foundation | The HELP Foundation (HELP) has been a leading provider of residential … |
| 2026-11-10 | StrucSure Home Warranty | StrucSure Home Warranty is a leading provider of new home warranties a… |
| 2026-11-10 | gamechangerwm.com | Game Changer Wealth is a full-service financial services firm with thr… |
| 2026-11-10 | raymondjames.com | Raymond James Financial is a prominent American multinational independ… |
| 2026-10-22 | bereskinparr.com smartbiggar.ca | |
| 2026-10-20 | centralrogers.com | |
| 2026-10-20 | Seetelhotels.de |
CONFIRMED ATTACKS
INC Ransom confirmed attacks: 219 verified incidents
Ransomnews has verified 219 INC Ransom incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from August 2023 to October 2026. United States accounts for 142 of them (65%), with victims recorded in 35 countries in total. The most affected sector is healthcare, at 76 confirmed victims. A ransom payment was publicly confirmed in 0 cases and publicly refused in 20; the outcome is unrecorded in the remaining 199. Where a figure was disclosed (105 cases), these incidents account for 9,295,230 exposed records.
219Verified incidents
35Countries
2023–2026Active range
0%Paid, where outcome known
Confirmed victims by year
Most affected sectors
Most affected countries
Verified INC Ransom incidents (100 most recent of 219)
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| October 2026 | Coopecaja | Finance | Costa Rica | — | Unknown | Source |
| October 2026 | Seetelhotels | Service | Usedom, Germany | — | Unknown | Source |
| September 2026 | BCX | Technology | Centurion, South Africa | — | Unknown | Source |
| September 2026 | North Slope Borough School District | Education | Alaska, United States | — | Unknown | Source |
| September 2026 | Westfield Public School District | Education | New Jersey, United States | — | Unknown | Source |
| August 2026 | Northern Counties Health Care, Inc. | Healthcare | Vermont, United States | — | Unknown | Source |
| August 2026 | Partners HoldCo, a.s. | Finance | Prague, Czechia | — | Unknown | Source |
| August 2026 | Policlinico Triestino | Healthcare | Trieste, Italy | — | Unknown | Source |
| July 2026 | Virginia Regional Peninsula Jail | Government | Virginia, United States | — | Unknown | Source |
| July 2026 | V-Silicon Semiconductor (Hefei) Co., Ltd. | Manufacturing | Hefei, China | — | Unknown | Source |
| July 2026 | Loyalist College | Education | Belleville, Canada | — | Unknown | Source |
| July 2026 | Greene County | Government | Georgia, United States | — | Unknown | Source |
| June 2026 | Life Bridges, Inc. | Healthcare | Tennessee, United States | 5,194 | Unknown | Source |
| June 2026 | Partnered Health | Healthcare | Eastwood, Australia | — | Unknown | Source |
| June 2026 | Stiftung Autismuslink | Healthcare | Bern, Switzerland | — | Unknown | Source |
| June 2026 | GSP Crop Science Ltd | Manufacturing | Navrangpura, India | — | Unknown | Source |
| June 2026 | City of Acworth | Government | Georgia, United States | — | Unknown | Source |
| June 2026 | Neuwoges | Government | Neubrandenburg, Germany | — | No | Source |
| May 2026 | SteelcoBelimed AG | Healthcare | Zug, Switzerland | — | Unknown | Source |
| May 2026 | Distrigaz Vest S.A. | Utilities | Oradea, Romania | — | Unknown | Source |
| May 2026 | Egnyte, Inc. | Technology | California, United States | — | Unknown | Source |
| May 2026 | Central Medical Services of Westrock (CMSW) | Healthcare | New York, United States | — | Unknown | Source |
| April 2026 | Brighton East Dental Clinic | Healthcare | Brighton East, Australia | — | Unknown | Source |
| April 2026 | Wright-Ryan Construction, Inc. | Construction | Maine, United States | — | Unknown | Source |
| April 2026 | BELFOR (Asia) Pte Ltd | Service | Singapore, Singapore | — | Unknown | Source |
| April 2026 | Dorotea Kommun | Government | Dorotea, Sweden | — | Unknown | Source |
| April 2026 | Mastercom Australia | Utilities | Granville, Australia | — | Unknown | Source |
| April 2026 | Bendigo & District Aboriginal Co-operative | Healthcare | North Bendigo, Australia | — | Unknown | Source |
| April 2026 | Berge-Bau GmbH & Co. KG | Construction | Erndtebrück, Germany | — | Unknown | Source |
| March 2026 | Lincoln Property Company Commercial LLC | Service | Texas, United States | 7,133 | Unknown | Source |
| March 2026 | Campbell University | Education | North Carolina, United States | 500 | Unknown | Source |
| March 2026 | Community Connections | Healthcare | District of Columbia, United States | 20,879 | Unknown | Source |
| March 2026 | Fulcrum Real Estate Services | Service | Washington, United States | 1,547 | Unknown | Source |
| March 2026 | Parker Lipman LLP | Legal | Colorado, United States | 1,120 | Unknown | Source |
| March 2026 | Pulpdent Corporation | Healthcare | Massachusetts, United States | 9 | Unknown | Source |
| March 2026 | Namibia Airports Company (NAC) | Government | Windhoek, Namibia | — | Unknown | Source |
| March 2026 | LHT Holdings Limited | Manufacturing | Singapore, Singapore | — | Unknown | Source |
| February 2026 | Alta Orthopaedics Medical Group, Inc. | Healthcare | California, United States | — | Unknown | Source |
| February 2026 | City of Cocoa | Government | Florida, United States | 896 | Unknown | Source |
| February 2026 | Contractors Supply Inc. | Retail | Rhode Island, United States | 181 | Unknown | Source |
| February 2026 | Glenmark Pharmaceuticals | Healthcare | Maharashtra, India | — | Unknown | Source |
| February 2026 | City of Meriden | Government | Connecticut, United States | 2,325 | Unknown | Source |
| February 2026 | Lymphedema Therapy Specialists, Inc. | Healthcare | Texas, United States | 378 | Unknown | Source |
| February 2026 | JA Akita Kita Life Service Co., Ltd. | Other | Akita, Japan | — | Unknown | Source |
| February 2026 | Air Côte d'Ivoire | Transportation | Abidjan, Ivory Coast | — | Unknown | Source |
| January 2026 | The Carlson Law Firm | Legal | Texas, United States | 250 | Unknown | Source |
| January 2026 | Cape Fear Country Club | Other | North Carolina, United States | — | Unknown | Source |
| January 2026 | Lohmann GmbH & Co. KG | Manufacturing | Neuwied, Germany | 381 | Unknown | Source |
| January 2026 | Denmark School District | Education | Wisconsin, United States | — | Unknown | Source |
| January 2026 | Ju Teng International Holdings Ltd. | Manufacturing | New Taipei City, Taiwan | — | Unknown | Source |
| January 2026 | Beacon Mutual Insurance Company | Finance | Rhode Island, United States | 162,439 | Unknown | Source |
| January 2026 | Distinctive Systems | Technology | York, United Kingdom | — | Unknown | Source |
| December 2025 | Chapter 13 Trustee Office of Rod Danielson | Legal | California, United States | 63,857 | Unknown | Source |
| December 2025 | OSI Systems, Inc. | Manufacturing | California, United States | 4,910 | Unknown | Source |
| December 2025 | Elmore Goldsmith Kelley & deHoll, P.A. | Legal | South Carolina, United States | — | Unknown | Source |
| December 2025 | Harrison Design Associates, Inc. | Service | Georgia, United States | 196 | Unknown | Source |
| December 2025 | Klingele Paper Nova Campina Ltda. | Manufacturing | Nova Campina, Brazil | — | Unknown | Source |
| December 2025 | Enea AB | Technology | Stockholm, Sweden | — | Unknown | Source |
| December 2025 | Beyçelik Gestamp Otomotiv Sanayi A.Ş. | Manufacturing | Bursa, Turkey | — | Unknown | Source |
| December 2025 | Precipio, Inc. | Healthcare | Connecticut, United States | 501 | Unknown | Source |
| November 2025 | M&Y Personal Injury Lawyers | Legal | California, United States | — | Unknown | Source |
| November 2025 | Foxconn Interconnect Technology | Technology | New Taipei City, Taiwan | — | Unknown | Source |
| November 2025 | Schmidt's Handelsgesellschaft mbH | Retail | Bürs, Austria | — | Unknown | Source |
| November 2025 | Rainbow Communications | Utilities | Kansas, United States | — | Unknown | Source |
| November 2025 | Valley View Independent School District | Education | Texas, United States | 3,806 | Unknown | Source |
| November 2025 | OnSolve (Crisis24) - CodeRED | Technology | Georgia, United States | 2,620 | Unknown | Source |
| November 2025 | Woom GmbH | Manufacturing | Vienna, Austria | — | Unknown | Source |
| October 2025 | The Ripley Academy and John Flamsteed Community School | Education | Ripley, United Kingdom | — | Unknown | Source |
| October 2025 | Kelly Legal | Legal | Mackay, Australia | — | Unknown | Source |
| October 2025 | Benedict Industries | Manufacturing | Belrose, Australia | — | Unknown | Source |
| September 2025 | Easterseals Northeast Indiana | Healthcare | Indiana, United States | 6,730 | Unknown | Source |
| September 2025 | Evolve Mortgage Services, LLC | Finance | Texas, United States | 6,663 | Unknown | Source |
| September 2025 | Summit Golf Brands | Manufacturing | New York, United States | — | Unknown | Source |
| September 2025 | Humax Holdings Co., Ltd. | Manufacturing | Bundang-gu, South Korea | — | Unknown | Source |
| September 2025 | Ministerio de Economía y Finanzas de Panamá | Government | Panama, Panama | — | Unknown | Source |
| August 2025 | Cardinal Services, Inc. | Service | Oregon, United States | 142,323 | Unknown | Source |
| August 2025 | TAK Broadband LLC | Construction | South Dakota, United States | 20,648 | Unknown | Source |
| August 2025 | Quadrangle Imaging Center | Healthcare | Caguas, Puerto Rico | 500 | Unknown | Source |
| August 2025 | Bartek Ingredients Inc. | Food and Beverage | Stoney Creek, Canada | — | Unknown | Source |
| August 2025 | Georgetown Brewing Co. | Food and Beverage | Washington, United States | 19,696 | Unknown | Source |
| August 2025 | OB-GYN Associates | Healthcare | Nevada, United States | 62,238 | Unknown | Source |
| August 2025 | University of St. Thomas | Education | Texas, United States | — | Unknown | Source |
| August 2025 | Centre de services scolaire des Appalaches (CSSA) | Education | Thetford Mines, Canada | — | Unknown | Source |
| August 2025 | AWO Landkreis Karlsruhe | Healthcare | Bruschal, Germany | — | No | Source |
| August 2025 | Pennsylvania Office of Attorney General | Government | Pennsylvania, United States | — | No | Source |
| July 2025 | Louis Tieu DDS MD Oral & Maxillofacial Surgery (Tieu Dental Corporation) | Healthcare | California, United States | 8,918 | Unknown | Source |
| July 2025 | Potts, Steele & White, P.A. | Finance | North Carolina, United States | — | Unknown | Source |
| July 2025 | Lamberts Business Systems | Technology | Palmerston North, New Zealand | — | Unknown | Source |
| July 2025 | 99 Cents Only Stores | Retail | California, United States | — | Unknown | Source |
| July 2025 | Town of Devon | Government | Devon, Canada | — | Unknown | Source |
| July 2025 | La Biennale di Venezia | Other | Venice, Italy | — | Unknown | Source |
| July 2025 | Municipality of Otjiwarongo | Government | Otjiwarongo, Namibia | — | Unknown | Source |
| June 2025 | Ernie's in Ceresco | Retail | Nebraska, United States | 898 | Unknown | Source |
| June 2025 | Netstar | Technology | Johannesburg, South Africa | — | No | Source |
| June 2025 | NEUES LEBEN e.V. | Other | Wölmersen, Germany | — | Unknown | Source |
| June 2025 | Albemarle County | Government | Virginia, United States | — | No | Source |
| June 2025 | City of Thomasville | Government | North Carolina, United States | — | No | Source |
| June 2025 | Marvimundo | Retail | Alguazas, Spain | — | No | Source |
| June 2025 | Ministry of Health (National Health Information System) | Government | Tongatapu, Tonga | — | No | Source |
| June 2025 | City of Durant | Government | Oklahoma, United States | — | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from INC Ransom's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.