Ransomware Group intelligence

Incransom

Active

Track Incransom with 909 published victims and 7 known leak locations in a single intelligence view.

Victims 909 Known published victims in this dataset
First discovered 2023-08-09 Earliest victim discovery date
Last discovered 2026-07-18 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 504 victims
Known locations 7 Leak or negotiation infrastructure tracked

Overview

Incransom is tracked by Breach House as a ransomware group with 909 published victims.

United States is currently the most targeted country in this dataset.

7 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (7)

    Label Type Availability Links
    Leak location 1 Onion service Unknown incblog7vmuq7rktic73r4ha4j757m3ptym37tyvifzp2roedyyzzxid.onion
    Leak location 2 Onion service Unknown incbackrlasjesgpfu5brktfjknbqoahe2hhmqfhasc5fb56mtukn4yd.onion
    Leak location 3 Web location Unknown incbackend.top
    Leak location 4 Web location Unknown incapt.blog
    Leak location 5 Web location Unknown incapt.su
    Leak location 6 Onion service Unknown incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion
    Leak location 7 Onion service Unknown incbacg6bfwtrlzwdbqc55gsfl763s3twdtwhp27dzuik6s6rwdcityd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (909)

    Search, filter and paginate the victim timeline for Incransom. Showing 501–600 of 909.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Radford City Schools id21487 View details United States Education
    Ransomware erichschleichgmbh.de id21475 View details Germany Retail / E-commerce
    Ransomware carolynmyoung.com id21474 View details United States Communication / Marketing
    Ransomware wvpca.org id21472 View details United States Healthcare / Pharma
    Ransomware firstpresatl.org id21469 View details United States Communication / Marketing
    Ransomware lynkspot.com id21466 View details United States Communication / Marketing
    Ransomware deliastamales.com id21465 View details United States Transportation / Travel / Logistics
    Ransomware whiteconlee.com id21464 View details United States Construction / Real Estate
    Ransomware Devon id21452 View details Canada Communication / Marketing
    Ransomware fsl.org id21449 View details United States Communication / Marketing
    Ransomware Dollar Tree id21441 View details United States Retail / E-commerce
    Ransomware teampostop.net id21357 View details United States Communication / Marketing
    Ransomware seasonsfour.com id21355 View details United States Retail / E-commerce
    Ransomware www.entecheng.com id21343 View details United States IT
    Ransomware www.labiennale.org id21342 View details Italy Communication / Marketing
    Ransomware www.lincecomercial.com id21341 View details Colombia Retail / E-commerce
    Ransomware Sementes Jotabasso id21340 View details Brazil Finance / Legal / Insurance
    Ransomware www.reliablecontrols.com id21316 View details United States Construction / Real Estate
    Ransomware TOMEI GROUP Inc. id21308 View details Japan Services
    Ransomware neues-leben.de id21293 View details Germany Communication / Marketing
    Ransomware asi-group.com id21292 View details Canada Communication / Marketing
    Ransomware reizenlaw.com id21291 View details United States Finance / Legal / Insurance
    Ransomware hitachi-tds.com id21289 View details United States Communication / Marketing
    Ransomware csaas.com id21288 View details United States Services
    Ransomware nboat.com id21286 View details United States Finance / Legal / Insurance
    Ransomware dtxstudio.com id21285 View details United States Communication / Marketing
    Ransomware heartlineoklahoma.org id21284 View details United States Healthcare / Pharma
    Ransomware scaffoldsolutions.com id21280 View details United States Services
    Ransomware erniesinceresco.com id21243 View details United States Retail / E-commerce
    Ransomware Wingpoh_SG id21217 View details Singapore Communication / Marketing
    Ransomware Crompton Lamps, UK id21216 View details United Kingdom Communication / Marketing
    Ransomware HTC_Högtryckscenter_Sweden id21215 View details Sweden Communication / Marketing
    Ransomware Huize Sint-Augustinus_BE id21214 View details Belgium NGOs / Associations
    Ransomware Vitec id21213 View details United States Education
    Ransomware Сomet-strip-enterprises-ltd id21212 View details Canada Communication / Marketing
    Ransomware TERENCE C RINGLAND & CO PTY LTD id21211 View details Australia Finance / Legal / Insurance
    Ransomware Secountryvets_AU id21210 View details Australia Healthcare / Pharma
    Ransomware Otjiwarongo Municipality id21158 View details Namibia Public Sector
    Ransomware www.marvimundo.com id21152 View details Spain Other
    Ransomware CF Construction Ltd id21151 View details Canada Construction / Real Estate
    Ransomware www.v4ulogistic.com/ Leaked by www.etornetworks.com id21134 View details Canada Telecommunications
    Ransomware dwllp.ca/ Leaked by www.etornetworks.com id21133 View details Canada Telecommunications
    Ransomware lstlaw.ca/ Leaked by www.etornetworks.com id21132 View details Canada Telecommunications
    Ransomware Trilinklogistics Inc / Leacked by www.etornetworks.com/ id21131 View details Canada Telecommunications
    Ransomware National Institute of Water Resources id21130 View details Dominican Republic Education
    Ransomware k12albemarle.org id21107 View details United States Education
    Ransomware brennytransportation.com id21096 View details United States Transportation / Travel / Logistics
    Ransomware tiergesundheitszentrum-koenigslutter.de id21095 View details Germany Healthcare / Pharma
    Ransomware bayviewci.org id21094 View details United States Healthcare / Pharma
    Ransomware communitycareresources.com id21093 View details United States Communication / Marketing
    Ransomware TBC id21077 View details Saudi Arabia Services
    Ransomware Lamberts Business Systems id21076 View details New Zealand Services
    Ransomware Majestic id21074 View details Philippines Other
    Ransomware tsaworld.com id21005 View details United States Communication / Marketing
    Ransomware jubileejobs.org id21004 View details United States Communication / Marketing
    Ransomware cityofgardendale.com id20966 View details United States Public Sector
    Ransomware C B King Memorial School(branch) id20959 View details United States Education
    Ransomware alereon.com id20932 View details United States Telecommunications
    Ransomware coruzcitywndata+ id20909 View details United States Public Sector
    Ransomware The Kingdom of Tonga's Ministry of Health id20852 View details Tonga Healthcare / Pharma
    Ransomware Medical Center of Marin id20826 View details United States Healthcare / Pharma
    Ransomware Fund for Reformed Companies (FONPER) id20821 View details Dominican Republic Communication / Marketing
    Ransomware OAK PARK & RIVER FOREST HIGH SCHOOL id20762 View details United States Education
    Ransomware doradosoftware.com id20758 View details United States Telecommunications
    Ransomware https://www.ilesfuneralhomes.com/ id20739 View details United States Other
    Ransomware AFECC - Hospital Santa Rita de Cássia id20738 View details Brazil Healthcare / Pharma
    Ransomware Morar Construtora e Incorporadora LTDA id20737 View details Brazil Construction / Real Estate
    Ransomware New Jersey Association on Correction id20723 View details United States NGOs / Associations
    Ransomware West Texas Oral and Facial Surgery id20716 View details United States Healthcare / Pharma
    Ransomware Academic Urology & Urogynecology of Arizona id20697 View details United States Communication / Marketing
    Ransomware Lamina Dielectrics, United Kingdom id20696 View details United Kingdom Communication / Marketing
    Ransomware Sandhill View County School_UK id20695 View details United Kingdom Education
    Ransomware Durant City id20694 View details United States Public Sector
    Ransomware alleray-labrouste id20616 View details France Healthcare / Pharma
    Ransomware Mount Rogers Community Services id20554 View details United States Services
    Ransomware waiwhetu-medical-centre id20516 View details New Zealand Healthcare / Pharma
    Ransomware MTTEXPERTISES.COM id20502 View details Morocco Services
    Ransomware Nunez Dental id20501 View details United States Healthcare / Pharma
    Ransomware Kittery Police Department id20500 View details United States Public Sector
    Ransomware iscamen id20453 View details Argentina Agriculture / Food
    Ransomware cemeteries.local id20437 View details Canada Communication / Marketing
    Ransomware Funktel GmbH id20436 View details Germany Communication / Marketing
    Ransomware Sandhills Medical Foundation id20406 View details United States Healthcare / Pharma
    Ransomware valuestoreit id20384 View details United States Retail / E-commerce
    Ransomware Universidad Técnica del Norte Ecuador id20383 View details Ecuador Other
    Ransomware mysfa.org id20360 View details United States Services
    Ransomware Jordan Drug id20336 View details United States Healthcare / Pharma
    Ransomware oxparkrec.org id20228 View details United States Communication / Marketing
    Ransomware piercecountylibrary.org id20189 View details United States Public Sector
    Ransomware Rivers Academy West London id20165 View details United Kingdom Education
    Ransomware The Vascular Experts id20150 View details United States Healthcare / Pharma
    Ransomware nissi-beach.com id20092 View details Cyprus Hospitality / Food & Beverage / Tourism
    Ransomware alpha-steuer.de id20091 View details Germany Services
    Ransomware npfy.org id20090 View details United States Education
    Ransomware finanzconsult-immobilien.de id20089 View details Germany Communication / Marketing
    Ransomware www.davisdavisco.com id20088 View details United States Energy
    Ransomware ros.eu id20087 View details Germany IT
    Ransomware ccrcda.org id20086 View details United States Communication / Marketing
    Ransomware south african airways (flysaa.com) id20031 View details South Africa Transportation / Travel / Logistics
    Ransomware GARDNER ORTHOPEDICS id20019 View details United States Healthcare / Pharma