Skip to content
← All breaches
Threat actor tracker 972 incidents tracked

INC Ransom — every breach we're tracking

Running log of incidents attributed to or claimed by INC Ransom in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked972
Latest activityOctober 01, 2026
TypeRansomware / extortion

Groups like INC Ransom steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

Showing the 60 most recent of 972 incidents we've attributed to INC Ransom.

high October 01, 2026

Post Metal Recycling Listed by INC Ransom Ransomware Group

Post Metal Recycling was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high October 01, 2026

Northern Counties Health Care Listed by INC Ransom Ransomware Group

Northern Counties Health Care was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high October 01, 2026

Den Hartog Industries Listed by INC Ransom Ransomware Group

Den Hartog Industries was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high October 01, 2026

Rimrock Foundation Listed by INC Ransom Ransomware Group

Rimrock Foundation was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high October 01, 2026

Guardian Pharmacy LLC Listed by INC Ransom Ransomware Group

Guardian Pharmacy LLC was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high September 29, 2026

bcx.co.za Listed by INC Ransom Ransomware Group

bcx.co.za was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high September 28, 2026

bakemyday.se Listed by INC Ransom Ransomware Group

bakemyday.se was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high September 28, 2026

nsbsd.org Listed by INC Ransom Ransomware Group

North Slope Borough School District is a public school district serving the remote communities of Alaska's North Slope, headquartered in Utq…

high September 28, 2026

Ahead Listed by INC Ransom Ransomware Group

AHEAD is a Chicago-based IT consulting and engineering firm specializing in the digital transformation of large enterprises. It offers strat…

high September 25, 2026

pharma5.ma Listed by INC Ransom Ransomware Group

pharma5.ma was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high September 24, 2026

bnlawmacau.com www.bn-ip.com Listed by INC Ransom Ransomware Group

bnlawmacau.com www.bn-ip.com was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high September 24, 2026

ukbjja.org Listed by INC Ransom Ransomware Group

ukbjja.org was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high September 24, 2026

Grupo Caberj Listed by INC Ransom Ransomware Group

Grupo Caberj was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high September 24, 2026

welgenone.com Listed by INC Ransom Ransomware Group

welgenone.com was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high September 23, 2026

Lemon Law Listed by INC Ransom Ransomware Group

Lemon Law was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high September 21, 2026

Second House Listed by INC Ransom Ransomware Group

Second House (Second House, S.L.) is a privately held real estate company headquartered in Barcelona, Spain, with over 26 years of ex…

high September 21, 2026

Maryann Kriger Listed by INC Ransom Ransomware Group

At Bonita Orthodontics, Dr. Maryann Kriger and our friendly team provide personalized orthodontic care using state-of-the-art techno…

high September 18, 2026

roancampingholidays.com Listed by INC Ransom Ransomware Group

roancampingholidays.com was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high September 18, 2026

kendallhunt.com Listed by INC Ransom Ransomware Group

kendallhunt.com was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high September 17, 2026

diarco.com.ar Listed by INC Ransom Ransomware Group

Diarco is a company that operates in the HR & Staffing industry. It employs 1000to4999 people and has 1Gto5G of revenue. The company is head…

high September 17, 2026

appliancefactory.com Listed by INC Ransom Ransomware Group

Appliance Factory & Mattress Kingdom offers a wide range of discount appliances and mattresses, providing unbeatable savings to customers ac…

high September 17, 2026

Silicon Integrated Systems Listed by INC Ransom Ransomware Group

Silicon Integrated Systems was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high September 16, 2026

Trulite Glass & Aluminum Solutions Listed by INC Ransom Ransomware Group

Trulite Glass & Aluminum Solutions is one of the largest independent glass and aluminum fabricators in North America. Headquartered in Alpha…

high September 16, 2026

Partners Financial Services, a.s. Listed by INC Ransom Ransomware Group

Date: September 2026 Target: Partners Financial Services, a.s. (IČO: 27699781) Location: Prague, Czech Republic Industry: Financial Services…

high September 16, 2026

Zito Marketi Listed by INC Ransom Ransomware Group

In the retail industry, there is a persistent myth that to scale nationally, a brand must inevitably shed its local soul. The prevailing log…

high September 16, 2026

Chicago History Museum Listed by INC Ransom Ransomware Group

Organization: Chicago History Museum (formerly Chicago Historical Society) Location: 1601 N Clark Street, Chicago, IL 60614 Website: chicago…

high September 16, 2026

aidon.com Listed by INC Ransom Ransomware Group

Aidon Oy / Gridspertise (Enel Group) — Smart Meter Operations Platform Breach Date: September 2026 Sector: Critical Infrastructure — Energy …

high September 16, 2026

City of Princeton Listed by INC Ransom Ransomware Group

Date added: September 2026 Website: princetontx.us Sector: Government / Municipal Administration Location: Collin County, Texas, USA (Dallas…

high September 10, 2026

jms building corporation Listed by INC Ransom Ransomware Group

jms building corporation was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high September 09, 2026

https://mediengruppethiel.de/ Listed by INC Ransom Ransomware Group

Die Mediengruppe Thiel aus Ludwigsfelde ist Ihr verlässlicher Druck- und Werbepartner, wenn es um individuelle Lösungen für innen und außen …

high September 09, 2026

mediengruppethiel.de Listed by INC Ransom Ransomware Group

mediengruppethiel.de was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high September 09, 2026

cullottalaw.com Listed by INC Ransom Ransomware Group

Cullotta Bravo Law Group is a personal injury law firm based in Aurora, IL, with over 35 years of experience in various legal areas includin…

high September 07, 2026

Wellness Partners network(combined revenue) Listed by INC Ransom Ransomware Group

Wellness Partners network(combined revenue) was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data…

high September 03, 2026

myglobal.com Listed by INC Ransom Ransomware Group

myglobal.com was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high September 02, 2026

specialtytextile.com Listed by INC Ransom Ransomware Group

specialtytextile.com was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high September 02, 2026

Asfaltos y Pavimentos S.A. (Asfalpasa) Listed by INC Ransom Ransomware Group

Asfaltos y Pavimentos S.A. (Asfalpasa) was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high September 02, 2026

Metales Panamericanos Listed by INC Ransom Ransomware Group

Metales Panamericanos was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high September 02, 2026

Policlinico Triestino Listed by INC Ransom Ransomware Group

Policlinico Triestino was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high September 02, 2026

Multiver Ltée Listed by INC Ransom Ransomware Group

Multiver Ltée was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high September 02, 2026

Westfield Public School District Listed by INC Ransom Ransomware Group

Westfield Public School District was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high September 02, 2026

Trucka Listed by INC Ransom Ransomware Group

Trucka was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high August 31, 2026

New Century Ophthalmology Group Listed by INC Ransom Ransomware Group

New Century Ophthalmology Group was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high August 31, 2026

lichtvision.com Listed by INC Ransom Ransomware Group

lichtvision.com was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high August 31, 2026

renorefractories.com Listed by INC Ransom Ransomware Group

renorefractories.com was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high August 31, 2026

cimbsecurities.com Listed by INC Ransom Ransomware Group

cimbsecurities.com was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high August 31, 2026

zummocorp.com Listed by INC Ransom Ransomware Group

zummocorp.com was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high August 31, 2026

www.lichtvision.com Listed by INC Ransom Ransomware Group

Lichtvision specializes in innovative lighting design, focusing on architectural spaces through the use of daylight, artificial light, and i…

high August 31, 2026

www.renorefractories.com Listed by INC Ransom Ransomware Group

RENO Refractories, Inc. specializes in the manufacturing of refractory products and services for various industrial applications, including …

high August 29, 2026

Oilquip Inc Listed by INC Ransom Ransomware Group

Oilquip Inc was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high August 29, 2026

wittmann Listed by INC Ransom Ransomware Group

wittmann was listed on the INC Ransom ransomware leak site. The group claims to have stolen internal data.…

high August 27, 2026

Rohloff Group Listed by INC Ransom Ransomware Group

KFC Rohloff Group franchise partner Total leak: 536 GB, 103,196 Files, 30,805 Folders Data: Employees personal , Loan applications, …

high August 27, 2026

Ruby Seven Studios Listed by INC Ransom Ransomware Group

Ruby Seven Studios Inc. https://www.rubyseven.com/ Total leak: 114 GB (123,463,823,360 bytes), 133,851 Files, 49,357 Folders. Data: S…

high August 27, 2026

Bencivil Listed by INC Ransom Ransomware Group

Benchmark Civil Engineering Services, Inc. is a civil engineering firm based in Allentown, PA, specializing in civil engineering, traffic st…

high August 24, 2026

FFKR Architects Listed by INC Ransom Ransomware Group

FFKR Architects is a leading architecture and interior design firm based in Utah, with additional offices in Arizona and Idaho. They offer a…

high August 22, 2026

el-group Listed by INC Ransom Ransomware Group

Unauthorized access has been gained to the company's confidential files, including client data, proprietary R&D, and financial documentation…

high August 19, 2026

Exel Listed by INC Ransom Ransomware Group

Exel Systems Inc. specializes in providing high-quality custom heating, ventilation, and air conditioning (HVAC) and energy recovery product…

high August 19, 2026

Bangkokcable Listed by INC Ransom Ransomware Group

About Bangkok Cable Bangkok Cable is Thailand's leading manufacturer of electric wires and cables, boasting over five decades of sustainabl…

high August 19, 2026

Cdgarvinlaw Listed by INC Ransom Ransomware Group

CHRISTOPHER D. GARVIN (Docket #2352300) is a Wood-Ridge attorney admitted to New York State in 1990 and registered with the Office of Court …

high August 19, 2026

Uniplastics.Com Listed by INC Ransom Ransomware Group

Universal Plastics Inc. is a family-owned commercial specialty subcontractor with over 50 years of experience, specializing in custom wall p…

high August 18, 2026

Foresee Pharmaceuticals Listed by INC Ransom Ransomware Group

Foresee Pharmaceuticals Co., Ltd. https://www.foreseepharma.com Total leak: 1,2TB Leak includes: Drug Master File, ASMF, FDA/EMA, R&D…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run my free scan
15 seconds · 13.1B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
The full report on what your scan found, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.