American Pools & Spas Listed by incransom Ransomware Group

On December 1, 2025, the ransomware group Incransom added American Pools & Spas, a pool construction and renovation company based in Orlando, Florida, to its public leak site and claimed to hold 500GB of the firm’s internal files, including fiscal data, internal emails, budgets, and other business records.

Reported Details of the Incident

Public reporting indicates that Incransom exfiltrated the data during a ransomware attack on the company. The group posted a notice on its leak site stating it possesses the 500GB archive and has begun publishing samples. No customer records or payment-card details have been explicitly listed in the initial disclosure, but the volume and type of material suggest a broad compromise of the company’s internal systems. The exact number of people whose personal information appears in the files remains unknown at this time.

Available reporting describes the posting as part of Incransom’s standard double-extortion tactic: first encrypting systems, then threatening to release stolen data unless a ransom is paid. The leak site entry carries today’s date, claiming the public phase of the incident began on December 1, 2025.

Why This Matters for You and Your Family

When a local business like your neighborhood pool company suffers a breach, the information exposed often includes names, addresses, phone numbers, email accounts, and sometimes Social Security numbers of customers, vendors, and employees. If you or anyone in your family has done business with American Pools & Spas in the past several years, your details could now sit inside that 500GB archive. Once criminals obtain such data, they rarely limit themselves to one target.