farbank.com (flywatertravel) Listed by incransom Ransomware Group

On February 17, 2026, the ransomware group IncRansom added farbank.com and its Fly Water Travel subsidiary to its leak site after exfiltrating roughly 100 GB of internal files from the fly-fishing manufacturer and travel company.

Reported Details of the Breach

Public reporting indicates that Far Bank Enterprises, which owns the brands Sage, Redington, RIO Products, and Fly Water Travel, suffered a ransomware intrusion. The attackers claim to have taken confidential documents and other internal data. The leak site lists the incident with a 100 GB payload size, though the precise number of individuals whose information appears in the files remains unknown. Available reporting describes the exposed material as including confidential documents; full contents have not been independently verified by third parties.

Why This Matters for You and Your Family

When a company that holds your travel bookings, payment details, or contact information is breached, the data can surface in unexpected places. If you or your family have booked a guided fly-fishing trip through Fly Water Travel, reserved gear, or joined any of their customer lists, your information may now sit in a ransomware repository. Confidential documents often contain names, addresses, phone numbers, email accounts, and sometimes passport or license details needed for remote fishing destinations. Once that material leaks, it no longer belongs only to the company; it belongs to whoever downloads it.

The Doxxing and Identity-Chain Risks

Ransomware leaks rarely stop at one company. A single exposed email or phone number can be fed into automated tools that link it to your social-media handles, children’s gaming usernames, family addresses, and other accounts. These identity chains let attackers or opportunistic criminals move from a fishing-trip booking to doxxing your household or attempting account takeovers on gaming platforms where your kids play. Credential leaks like this one frequently cascade into broader harassment because the same password or recovery details used for travel reservations often protect email, social media, and online gaming services.

IncRansom’s Publicly Known Track Record

Public reporting attributes IncRansom with emerging in late 2024. The group has targeted mid-sized companies across retail, manufacturing, and travel sectors. Its typical playbook involves initial access through phishing or exploited remote-desktop services, followed by exfiltration of internal files before encryption. The operators then demand payment and, if unpaid, publish samples or full datasets on their leak site to pressure victims. Past incidents show a focus on small-to-medium businesses whose data-protection practices may lag behind larger corporations.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Rotate any password you used on farbank.com or Fly Water Travel anywhere else it is reused, and switch on 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your family’s data is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same address or email.
• Let remediation specialists handle takedown requests across data brokers and leak sites for you while you focus on securing your own accounts.

The incident shows that even specialized travel companies can become links in a larger identity-exposure chain. Taking concrete steps now limits how far attackers can travel with your information. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects online handles to real identities, and hands-on remediation by specialists who manage takedowns for you and your entire household, including children’s gaming accounts that frequently become targets after credential leaks like this one.