Ransomware Group intelligence

Incransom

Active

Track Incransom with 909 published victims and 7 known leak locations in a single intelligence view.

Victims 909 Known published victims in this dataset
First discovered 2023-08-09 Earliest victim discovery date
Last discovered 2026-07-18 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 504 victims
Known locations 7 Leak or negotiation infrastructure tracked

Overview

Incransom is tracked by Breach House as a ransomware group with 909 published victims.

United States is currently the most targeted country in this dataset.

7 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (7)

    Label Type Availability Links
    Leak location 1 Onion service Unknown incblog7vmuq7rktic73r4ha4j757m3ptym37tyvifzp2roedyyzzxid.onion
    Leak location 2 Onion service Unknown incbackrlasjesgpfu5brktfjknbqoahe2hhmqfhasc5fb56mtukn4yd.onion
    Leak location 3 Web location Unknown incbackend.top
    Leak location 4 Web location Unknown incapt.blog
    Leak location 5 Web location Unknown incapt.su
    Leak location 6 Onion service Unknown incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion
    Leak location 7 Onion service Unknown incbacg6bfwtrlzwdbqc55gsfl763s3twdtwhp27dzuik6s6rwdcityd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (909)

    Search, filter and paginate the victim timeline for Incransom. Showing 601–700 of 909.

    Type Target Discovered Country Business Category Intel Link
    Ransomware StudioVaiani id19659 View details Italy Finance / Legal / Insurance
    Ransomware The Saint James Hospital Group id19656 View details Malta Healthcare / Pharma
    Ransomware Hpital Glengarry Memorial Hospital (clglen.local) id19626 View details Canada Healthcare / Pharma
    Ransomware arkansasprimarycare.com id19328 View details United States Communication / Marketing
    Ransomware lemi-group id19310 View details Italy Healthcare / Pharma
    Ransomware franklin nursing home id19295 View details United States Healthcare / Pharma
    Ransomware Koninklijke Ahold Delhaize N.V. id19206 View details Netherlands Communication / Marketing
    Ransomware iblinfo.de id19181 View details Germany Manufacturing / Engineering
    Ransomware trocaire.edu id19165 View details United States Education
    Ransomware Orthopaedic Specialists of Connecticut id19146 View details United States Healthcare / Pharma
    Ransomware MENTAL HEALTH id19145 View details United States Healthcare / Pharma
    Ransomware Chickenshed id19110 View details United Kingdom Communication / Marketing
    Ransomware Imagineering Finishing Technologies id19096 View details United States IT
    Ransomware inspec-international.com id19082 View details United States IT
    Ransomware silocaf.com id19073 View details United States Communication / Marketing
    Ransomware chesterfieldtwp.org id19072 View details United States Communication / Marketing
    Ransomware finetech.de id19071 View details Germany IT
    Ransomware ccso2014.local(sheriffs) id19057 View details United States Public Sector
    Ransomware Coop57 id19038 View details Spain Finance / Legal / Insurance
    Ransomware Thiekon Constructie id19036 View details Netherlands Manufacturing / Engineering
    Ransomware The Loretto Hospital id18898 View details United States Healthcare / Pharma
    Ransomware bahnlog.com id18801 View details United States Transportation / Travel / Logistics
    Ransomware importantsteps.com id18800 View details United States Communication / Marketing
    Ransomware augustssons.se id18765 View details Sweden Manufacturing / Engineering
    Ransomware City of Fort St. John (city.cityfsj.local) id18741 View details Canada Public Sector
    Ransomware TriCity Family Services id18724 View details United States Services
    Ransomware TMT Clam Dredger id18664 View details United States Other
    Ransomware allbiz.com id18663 View details United States Retail / E-commerce
    Ransomware abeyor.fr id18626 View details France Communication / Marketing
    Ransomware bellendorf.de id18575 View details Germany Communication / Marketing
    Ransomware warmsworth.doncaster.sch.uk id18516 View details United Kingdom Education
    Ransomware alphaoil.ca id18515 View details Canada Energy
    Ransomware newhollandwood.com id18511 View details United States Retail / E-commerce
    Ransomware gaertnerhof-jeutter.de id18489 View details Germany NGOs / Associations
    Ransomware expertdata.com.au id18486 View details Australia Services
    Ransomware airtelligence.com id18485 View details United States Communication / Marketing
    Ransomware sitro.com.au id18446 View details Australia Manufacturing / Engineering
    Ransomware yeanshalle.de id18426 View details Germany Other
    Ransomware Bancroft Wines id18415 View details United Kingdom Communication / Marketing
    Ransomware wmk-hvb.de id18330 View details Germany Healthcare / Pharma
    Ransomware Essex County OB/GYN Associates id18320 View details United States Healthcare / Pharma
    Ransomware emperors.edu id18287 View details United States Healthcare / Pharma
    Ransomware wog-kaiserbaeder.de id18286 View details Germany Other
    Ransomware BerksBar.org id18285 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware williampevear.com id18284 View details United States Communication / Marketing
    Ransomware baldaufarchitekten.de id18283 View details Germany Communication / Marketing
    Ransomware State Bar of Texas (www.texasbar.com) id18280 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Greenwood Village South GVS id18279 View details United States Services
    Ransomware Naples Heritage Golf & Country Club id18217 View details United States Communication / Marketing
    Ransomware germancentre.sg id18115 View details Singapore Services
    Ransomware breakawayconcretecutting.com id18114 View details Chad Construction / Real Estate
    Ransomware sublettecountywy.gov id18087 View details United States Public Sector
    Ransomware megamtls.com id17792 View details Canada Communication / Marketing
    Ransomware evergreenpnw.com id17706 View details United States NGOs / Associations
    Ransomware teamsters175.org id17703 View details United States Communication / Marketing
    Ransomware statesideseattle.com id17690 View details United States Public Sector
    Ransomware californiaclingpeaches.com id17665 View details United States Agriculture / Food
    Ransomware ehdd.com id17654 View details United States Education
    Ransomware lavi.co.il id17606 View details Israel Hospitality / Food & Beverage / Tourism
    Ransomware pyasolutions.com id17605 View details Canada Services
    Ransomware Persante Health Care id17562 View details United States Healthcare / Pharma
    Ransomware Northeast Delta Human Services Authority id17542 View details United States Services
    Ransomware City of McKinney id17541 View details United States Public Sector
    Ransomware The Children's Center Of Hamden id17418 View details United States Communication / Marketing
    Ransomware Boldon James id16995 View details United Kingdom Communication / Marketing
    Ransomware air europa id16994 View details Spain Transportation / Travel
    Ransomware tnlottery.com id16993 View details United States Education
    Ransomware Turning Leaf (TURNINGLEAF.local) id16984 View details United States Healthcare / Pharma
    Ransomware Heart to Heart Hospice id16983 View details United States Services
    Ransomware City Of Beloit id16981 View details United States Public Sector
    Ransomware Menominee Tribal Clinic id16969 View details United States Healthcare / Pharma
    Ransomware Mission Locale Montpellier id16968 View details France Other
    Ransomware broward.edu id16959 View details United States Education
    Ransomware cnnindonesia.com id16949 View details Indonesia Hospitality / Food & Beverage / Tourism
    Ransomware lhps.org id16940 View details United States Education
    Ransomware Prinston Pharmaceutical (huahaius.com) id16938 View details United States Healthcare / Pharma
    Ransomware International AIDS Vaccine Initiative (iavi.org) id16871 View details United States Communication / Marketing
    Ransomware starkaerospace.com id16777 View details United States Communication / Marketing
    Ransomware RETAL Baltic Films id16745 View details Cyprus Communication / Marketing
    Ransomware Washington Gastroenterology (DHSWA.NET) id16697 View details United States Energy
    Ransomware Kilgore College (kilgore.edu) id16696 View details United States Education
    Ransomware peponline.org id16695 View details Communication / Marketing
    Ransomware Taylor Regional Hospital (thcg.local) id16694 View details United States Healthcare / Pharma
    Ransomware Regina Coeli Convent id16693 View details Communication / Marketing
    Ransomware Onecare id16630 View details United States Services
    Ransomware Biomedical Caledonia Medical Laboratory (calmedlab.local) id16629 View details Jamaica Healthcare / Pharma
    Ransomware Imperial Valley Respite (ivrespite.com) id16628 View details United States Construction / Real Estate
    Ransomware Riverina Medical id16627 View details Australia Healthcare / Pharma
    Ransomware Spectrum id16626 View details Australia Healthcare / Pharma
    Ransomware depewgillen.com id16560 View details United States Other
    Ransomware fwmep.edu id16541 View details United States Healthcare / Pharma
    Ransomware Youth Eastside Services id16536 View details United States Services
    Ransomware falp.org id16415 View details Switzerland Other
    Ransomware Inner City Family Health Team (ICFHT.local) id16412 View details Canada Communication / Marketing
    Ransomware Primary Health Services Center id16411 View details United States Healthcare / Pharma
    Ransomware Haji Husein Alireza id15956 View details Saudi Arabia Construction / Real Estate
    Ransomware Arc Community Services Inc id15902 View details United States Services
    Ransomware Black Creek Community Health Centre (bcch.local) id15901 View details Canada Healthcare / Pharma
    Ransomware McKibbin id15785 View details Ireland Construction / Real Estate
    Ransomware NHS Alder Hey id15716 View details United Kingdom Healthcare / Pharma