Fund for Reformed Companies (FONPER) Listed by incransom Ransomware Group

On June 17, 2025, the Fondo Patrimonial de las Empresas Reformadas (FONPER) appeared on the leak site of the incransom ransomware group. The Dominican state institution responsible for managing government shares in reformed companies had internal files exfiltrated during a ransomware attack. While the exact number of people whose personal information may be exposed remains unknown, anyone whose records passed through FONPER could be affected.

What Public Reporting Shows

Public reporting indicates that incransom listed FONPER on its leak site and claims to have stolen internal files. The breach stems from a ransomware incident in which the attackers exfiltrated data before encrypting systems or demanding payment. Available reporting describes FONPER as the entity created by Law 124-01 in 2001 to safeguard the Dominican State’s ownership stakes in companies formed during the economic reforms that began in 1997. No confirmed victim count or precise list of exposed data types has been released by the organization or the attackers.

Why This Matters for You and Your Family

When a government agency that handles corporate and potentially personal records is breached, the consequences reach ordinary citizens. Your name, address, identification numbers, financial details, or employment records may have been stored in the affected systems. Once that information is in the hands of criminals, it can be sold, published, or used to target you with fraud, phishing, or identity theft. Credential leaks like this one often cascade into account takeovers that affect banking, email, and even gaming accounts belonging to you or your children.

The Doxxing and Identity-Chain Implications

Stolen internal files frequently contain more than isolated records. They can link email addresses, phone numbers, government IDs, and employee details in ways that let attackers build a complete picture of your life. A single leaked document can connect your work identity to family members, home addresses, and online handles. This chain makes it easier for criminals to dox you, impersonate you, or harass your household. Gaming accounts are especially vulnerable because children often reuse passwords or email addresses tied to family data, turning one institutional breach into a direct route to family doxxing.

Incransom’s Publicly Known Track Record

Public reporting attributes incransom with emerging in recent years as a ransomware operation that combines encryption with data theft and extortion. The group’s typical playbook involves gaining initial access, exfiltrating sensitive files, and then publishing samples on its leak site when victims do not pay. Notable prior victims have included various organizations across different sectors, though specific earlier cases remain limited in open sources. The group posts deadlines and proof of stolen data to pressure targets into negotiation.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity so you can see exactly what this claimed breach connects to.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your family is caught in hours rather than months.
• Rotate any password you used at FONPER or related Dominican government services anywhere it has been reused, and switch to 2FA through an authenticator app instead of SMS.
• Cover the household with DoxxScan family protection that extends to dependents and your children’s gaming accounts, which often chain back to the same addresses and emails exposed in incidents like this.
• Let remediation specialists handle takedown requests and broker removals for you so the leaked information does not stay available for identity thieves.

The FONPER breach is a reminder that institutional data leaks quickly become personal threats when identity chains are exposed. Taking deliberate steps now limits how far attackers can travel with the stolen information. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Starting protective action promptly helps keep your family’s information from fueling the next stage of an attack.