Ransomware Group intelligence

Incransom

Active

Track Incransom with 986 published victims and 7 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 986 Known published victims in this dataset
First discovered 2023-08-09 Earliest victim discovery date
Last discovered 2026-10-15 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 545 victims
Known locations 7 Leak or negotiation infrastructure tracked

Overview

Incransom is tracked by Breach House as a ransomware group with 986 published victims.

United States is currently the most targeted country in this dataset.

7 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 281 28.5%
  • Pending 702 71.2%
  • Deleted 3 0.3%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (7)

    Label Type Availability Links
    Leak location 6 Onion service Up checked 4h ago incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion
    Leak location 7 Onion service Up checked 4h ago incbacg6bfwtrlzwdbqc55gsfl763s3twdtwhp27dzuik6s6rwdcityd.onion
    Leak location 2 Onion service Down checked 4h ago incbackrlasjesgpfu5brktfjknbqoahe2hhmqfhasc5fb56mtukn4yd.onion
    Leak location 5 Web location Down checked 4h ago incapt.su
    Leak location 1 Onion service Down checked 4h ago incblog7vmuq7rktic73r4ha4j757m3ptym37tyvifzp2roedyyzzxid.onion
    Leak location 4 Web location Down checked 4h ago incapt.blog
    Leak location 3 Web location Down checked 4h ago incbackend.top

    Top Activity Sectors (18)

    Victims (986)

    Search, filter and paginate the victim timeline for Incransom. Showing 401–500 of 986.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware beycelik id24749 View details Türkiye Manufacturing / Engineering leaked
    Ransomware rainbowtel.net id24674 View details United States Communication / Marketing leaked
    Ransomware sandiegowarroom.com id24613 View details United States Services pending
    Ransomware Foxconn Interconnect Technology Limited (FIT) id24608 View details Taiwan, Province of China IT pending
    Ransomware hohmartin.org id24607 View details United States Communication / Marketing pending
    Ransomware YAZAKI Corp id24532 View details Japan Communication / Marketing pending
    Ransomware www.mylawcompany.com id24486 View details United States Finance / Legal / Insurance pending
    Ransomware bennett.edu id24466 View details United States Education pending
    Ransomware bisonfamilymedical.com id24397 View details Canada Healthcare / Pharma pending
    Ransomware instyle.com.au id24396 View details Australia Healthcare / Pharma pending
    Ransomware www.precipiodx.com id24370 View details United States Communication / Marketing pending
    Ransomware American Pools & Spas id24364 View details United States Construction / Real Estate pending
    Ransomware oxfordshop.com.au id24359 View details Australia Retail / E-commerce pending
    Ransomware millerwoodtradepub.com id24346 View details United States Communication / Marketing leaked
    Ransomware www.enea.com id24342 View details Sweden Other pending
    Ransomware vviewisd.net id24295 View details United States Education leaked
    Ransomware PFMI id24265 View details United States Finance / Legal / Insurance pending
    Ransomware FIT id24256 View details Taiwan, Province of China Manufacturing / Engineering pending
    Ransomware ITL Systemhaus id24236 View details Germany Education pending
    Ransomware cryopur.com id24206 View details France Energy pending
    Ransomware Schmidt's id24205 View details Austria Services pending
    Ransomware Southern Lion Sdn Bhd id24187 View details Malaysia Communication / Marketing pending
    Ransomware omegatoolcorp.com id24182 View details Canada Manufacturing / Engineering pending
    Ransomware onsolve.com id24132 View details United States Communication / Marketing pending
    Ransomware Woom GmbH id24127 View details Austria Manufacturing / Engineering pending
    Ransomware TBTEAM id24126 View details United States Communication / Marketing pending
    Ransomware naffco.com id24009 View details United Arab Emirates Communication / Marketing pending
    Ransomware reidhurstnagy.com id23998 View details Canada Services pending
    Ransomware baisyaakov.ca id23978 View details Canada Education leaked
    Ransomware continuumindia.com id23977 View details United States Healthcare / Pharma pending
    Ransomware ripleyacademy.org id23976 View details United Kingdom Education pending
    Ransomware grandeprairie.org id23975 View details United States Communication / Marketing leaked
    Ransomware datenlotsen.de id23974 View details Germany Education pending
    Ransomware zadroinc.com id23973 View details United States Healthcare / Pharma pending
    Ransomware eakas.com id23906 View details United States Manufacturing / Engineering pending
    Ransomware Kaan Cronenberg & Partners Law id23889 View details Austria Finance / Legal / Insurance pending
    Ransomware facadeinnovations.com.au id23884 View details United States Construction / Real Estate pending
    Ransomware www.northcroftme.com id23883 View details Qatar Other pending
    Ransomware kellylegal.com.au id23882 View details Australia Finance / Legal / Insurance leaked
    Ransomware wafergrind.com id23881 View details United States Manufacturing / Engineering leaked
    Ransomware duboiswood.com id23880 View details United States Communication / Marketing leaked
    Ransomware rosemontexpo.com id23879 View details United States Services leaked
    Ransomware avrind.com id23877 View details Israel Manufacturing / Engineering leaked
    Ransomware KohaFoods Hawaii id23824 View details United States Agriculture / Food leaked
    Ransomware latamlex (gyg.local) id23823 View details Costa Rica Finance / Legal / Insurance pending
    Ransomware Znojma Czechia id23822 View details Czechia Public Sector leaked
    Ransomware Grupo Via Argentina id23819 View details Argentina Construction / Real Estate leaked
    Ransomware bridge-housing-corp id23818 View details United States Construction / Real Estate leaked
    Ransomware forensicmed.com id23817 View details United States Healthcare / Pharma leaked
    Ransomware galileo.it id23816 View details Italy Finance / Legal / Insurance leaked
    Ransomware Wiraswasta Gemilang id23812 View details Indonesia Retail / E-commerce leaked
    Ransomware Sarulla Operation id23780 View details Indonesia Finance / Legal / Insurance leaked
    Ransomware www.modcomedia.com id23779 View details United States Communication / Marketing pending
    Ransomware Easterseals Arc of Northeast Indiana id23776 View details United States Communication / Marketing pending
    Ransomware Community Unit School District 201 id23775 View details United States Education leaked
    Ransomware Weintraub Traub Tracy & Virk Cra's LLP id23761 View details United States Construction / Real Estate pending
    Ransomware Ketat Grundstücksverwertungs GmbH id23664 View details Austria Construction / Real Estate pending
    Ransomware prutsch-ra.at id23663 View details Austria Communication / Marketing pending
    Ransomware MusikComputer GmbH id23662 View details Germany IT pending
    Ransomware pmsp.at id23660 View details Austria Construction / Real Estate pending
    Ransomware elektroanlagen id23659 View details Austria Construction / Real Estate pending
    Ransomware zebra.or.at id23658 View details Austria Construction / Real Estate pending
    Ransomware The Union League of Philadelphia id23623 View details United States Communication / Marketing pending
    Ransomware sensationalteeth.com id23618 View details United States Healthcare / Pharma pending
    Ransomware thevisapro.com (Yibirin Law Group) id23598 View details United States Finance / Legal / Insurance pending
    Ransomware afton.loc id23571 View details United States Communication / Marketing pending
    Ransomware Vitalmex id23570 View details Mexico Healthcare / Pharma leaked
    Ransomware REPECHAGE id23561 View details United States Healthcare / Pharma leaked
    Ransomware TMF Logistics id23539 View details Algeria Transportation / Travel / Logistics leaked
    Ransomware aa-llp.com (aa.law) id23538 View details United States Finance / Legal / Insurance pending
    Ransomware VZW Avalon id23530 View details Belgium Other leaked
    Ransomware Evolve Mortgage Services id23499 View details United States Services pending
    Ransomware DILOSA FOOD COMPANIES id23496 View details El Salvador Agriculture / Food pending
    Ransomware Alios Finance Group id23454 View details Tunisia Finance / Legal / Insurance leaked
    Ransomware dwgra.com id23357 View details Canada Communication / Marketing pending
    Ransomware partitio.com id23356 View details France Services leaked
    Ransomware auge.com id23348 View details United States Manufacturing / Engineering leaked
    Ransomware Kumwell id23274 View details Thailand Energy pending
    Ransomware summitgolfbrands.com id23191 View details United States Communication / Marketing pending
    Ransomware Shadrix & Parmer, P.C. id23177 View details United States Other pending
    Ransomware baronespecialtysteel.com id23056 View details United States Manufacturing / Engineering leaked
    Ransomware Balfour Beatty id22985 View details United States Construction / Real Estate pending
    Ransomware georgetown-brewing-co id22928 View details United States Manufacturing / Engineering pending
    Ransomware NextGen Mold Technologies id22927 View details Canada IT leaked
    Ransomware Benedict Industries id22926 View details Australia Construction / Real Estate leaked
    Ransomware https://www.tongapower.to/ id22925 View details Tonga Energy pending
    Ransomware Chapter 13 Texas id22883 View details United States Communication / Marketing pending
    Ransomware WELLSLANDSCAPING.COM id22825 View details United States Communication / Marketing leaked
    Ransomware Cobra Rolamentos e Autopeças id22819 View details Brazil Communication / Marketing pending
    Ransomware terex id22818 View details Canada Communication / Marketing pending
    Ransomware hillsidelibrary.org id22814 View details United States IT leaked
    Ransomware stalkerradar.com id22813 View details United States Manufacturing / Engineering leaked
    Ransomware ocmaine.com id22812 View details United States Construction / Real Estate pending
    Ransomware stockmeier-urethanes.com id22740 View details Germany Communication / Marketing pending
    Ransomware suntreeinternalmedicine.com id22712 View details United States Healthcare / Pharma pending
    Ransomware Climatron id22698 View details South Africa Finance / Legal / Insurance pending
    Ransomware callhci.com id22694 View details United States Communication / Marketing pending
    Ransomware icc-nw.net id22693 View details United States Manufacturing / Engineering pending
    Ransomware Cholakyan Chiropractic id22691 View details United States Communication / Marketing pending
    Ransomware LAMMCO.NET id22690 View details United States Manufacturing / Engineering leaked