Ransomware Group intelligence

Incransom

Active

Track Incransom with 986 published victims and 7 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 986 Known published victims in this dataset
First discovered 2023-08-09 Earliest victim discovery date
Last discovered 2026-10-15 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 545 victims
Known locations 7 Leak or negotiation infrastructure tracked

Overview

Incransom is tracked by Breach House as a ransomware group with 986 published victims.

United States is currently the most targeted country in this dataset.

7 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 281 28.5%
  • Pending 702 71.2%
  • Deleted 3 0.3%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (7)

    Label Type Availability Links
    Leak location 6 Onion service Up checked 5h ago incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion
    Leak location 7 Onion service Up checked 5h ago incbacg6bfwtrlzwdbqc55gsfl763s3twdtwhp27dzuik6s6rwdcityd.onion
    Leak location 2 Onion service Down checked 5h ago incbackrlasjesgpfu5brktfjknbqoahe2hhmqfhasc5fb56mtukn4yd.onion
    Leak location 5 Web location Down checked 5h ago incapt.su
    Leak location 1 Onion service Down checked 5h ago incblog7vmuq7rktic73r4ha4j757m3ptym37tyvifzp2roedyyzzxid.onion
    Leak location 4 Web location Down checked 5h ago incapt.blog
    Leak location 3 Web location Down checked 5h ago incbackend.top

    Top Activity Sectors (18)

    Victims (986)

    Search, filter and paginate the victim timeline for Incransom. Showing 701–800 of 986.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware augustssons.se id18765 View details Sweden Manufacturing / Engineering leaked
    Ransomware City of Fort St. John (city.cityfsj.local) id18741 View details Canada Public Sector pending
    Ransomware TriCity Family Services id18724 View details United States Services pending
    Ransomware TMT Clam Dredger id18664 View details United States Other leaked
    Ransomware allbiz.com id18663 View details United States Retail / E-commerce leaked
    Ransomware abeyor.fr id18626 View details France Communication / Marketing leaked
    Ransomware bellendorf.de id18575 View details Germany Communication / Marketing leaked
    Ransomware warmsworth.doncaster.sch.uk id18516 View details United Kingdom Education pending
    Ransomware alphaoil.ca id18515 View details Canada Energy pending
    Ransomware newhollandwood.com id18511 View details United States Retail / E-commerce pending
    Ransomware gaertnerhof-jeutter.de id18489 View details Germany NGOs / Associations pending
    Ransomware expertdata.com.au id18486 View details Australia Services leaked
    Ransomware airtelligence.com id18485 View details United States Communication / Marketing pending
    Ransomware sitro.com.au id18446 View details Australia Manufacturing / Engineering leaked
    Ransomware yeanshalle.de id18426 View details Germany Other leaked
    Ransomware Bancroft Wines id18415 View details United Kingdom Communication / Marketing leaked
    Ransomware wmk-hvb.de id18330 View details Germany Healthcare / Pharma pending
    Ransomware Essex County OB/GYN Associates id18320 View details United States Healthcare / Pharma leaked
    Ransomware emperors.edu id18287 View details United States Healthcare / Pharma leaked
    Ransomware wog-kaiserbaeder.de id18286 View details Germany Other leaked
    Ransomware BerksBar.org id18285 View details United States Hospitality / Food & Beverage / Tourism leaked
    Ransomware williampevear.com id18284 View details United States Communication / Marketing leaked
    Ransomware baldaufarchitekten.de id18283 View details Germany Communication / Marketing pending
    Ransomware State Bar of Texas (www.texasbar.com) id18280 View details United States Hospitality / Food & Beverage / Tourism leaked
    Ransomware Greenwood Village South GVS id18279 View details United States Services leaked
    Ransomware Naples Heritage Golf & Country Club id18217 View details United States Communication / Marketing pending
    Ransomware germancentre.sg id18115 View details Singapore Services leaked
    Ransomware breakawayconcretecutting.com id18114 View details Chad Construction / Real Estate pending
    Ransomware sublettecountywy.gov id18087 View details United States Public Sector pending
    Ransomware megamtls.com id17792 View details Canada Communication / Marketing leaked
    Ransomware evergreenpnw.com id17706 View details United States NGOs / Associations pending
    Ransomware teamsters175.org id17703 View details United States Communication / Marketing pending
    Ransomware statesideseattle.com id17690 View details United States Public Sector leaked
    Ransomware californiaclingpeaches.com id17665 View details United States Agriculture / Food leaked
    Ransomware ehdd.com id17654 View details United States Education pending
    Ransomware lavi.co.il id17606 View details Israel Hospitality / Food & Beverage / Tourism leaked
    Ransomware pyasolutions.com id17605 View details Canada Services pending
    Ransomware Persante Health Care id17562 View details United States Healthcare / Pharma pending
    Ransomware Northeast Delta Human Services Authority id17542 View details United States Services pending
    Ransomware City of McKinney id17541 View details United States Public Sector pending
    Ransomware The Children's Center Of Hamden id17418 View details United States Communication / Marketing pending
    Ransomware Boldon James id16995 View details United Kingdom Communication / Marketing leaked
    Ransomware air europa id16994 View details Spain Transportation / Travel / Logistics pending
    Ransomware tnlottery.com id16993 View details United States Education leaked
    Ransomware Turning Leaf (TURNINGLEAF.local) id16984 View details United States Healthcare / Pharma leaked
    Ransomware Heart to Heart Hospice id16983 View details United States Services pending
    Ransomware City Of Beloit id16981 View details United States Public Sector pending
    Ransomware Menominee Tribal Clinic id16969 View details United States Healthcare / Pharma leaked
    Ransomware Mission Locale Montpellier id16968 View details France Other pending
    Ransomware broward.edu id16959 View details United States Education leaked
    Ransomware cnnindonesia.com id16949 View details Indonesia Hospitality / Food & Beverage / Tourism leaked
    Ransomware lhps.org id16940 View details United States Education pending
    Ransomware Prinston Pharmaceutical (huahaius.com) id16938 View details United States Healthcare / Pharma leaked
    Ransomware International AIDS Vaccine Initiative (iavi.org) id16871 View details United States Communication / Marketing leaked
    Ransomware starkaerospace.com id16777 View details United States Communication / Marketing leaked
    Ransomware RETAL Baltic Films id16745 View details Cyprus Communication / Marketing pending
    Ransomware Washington Gastroenterology (DHSWA.NET) id16697 View details United States Energy leaked
    Ransomware Kilgore College (kilgore.edu) id16696 View details United States Education leaked
    Ransomware peponline.org id16695 View details Communication / Marketing leaked
    Ransomware Taylor Regional Hospital (thcg.local) id16694 View details United States Healthcare / Pharma leaked
    Ransomware Regina Coeli Convent id16693 View details Communication / Marketing leaked
    Ransomware Onecare id16630 View details United States Services leaked
    Ransomware Biomedical Caledonia Medical Laboratory (calmedlab.local) id16629 View details Jamaica Healthcare / Pharma leaked
    Ransomware Imperial Valley Respite (ivrespite.com) id16628 View details United States Construction / Real Estate leaked
    Ransomware Riverina Medical id16627 View details Australia Healthcare / Pharma pending
    Ransomware Spectrum id16626 View details Australia Healthcare / Pharma pending
    Ransomware depewgillen.com id16560 View details United States Other pending
    Ransomware fwmep.edu id16541 View details United States Healthcare / Pharma leaked
    Ransomware Youth Eastside Services id16536 View details United States Services leaked
    Ransomware falp.org id16415 View details Switzerland Other pending
    Ransomware Inner City Family Health Team (ICFHT.local) id16412 View details Canada Communication / Marketing pending
    Ransomware Primary Health Services Center id16411 View details United States Healthcare / Pharma pending
    Ransomware Haji Husein Alireza id15956 View details Saudi Arabia Construction / Real Estate pending
    Ransomware Arc Community Services Inc id15902 View details United States Services pending
    Ransomware Black Creek Community Health Centre (bcch.local) id15901 View details Canada Healthcare / Pharma pending
    Ransomware McKibbin id15785 View details Ireland Construction / Real Estate pending
    Ransomware NHS Alder Hey id15716 View details United Kingdom Healthcare / Pharma pending
    Ransomware visufarma.com id15707 View details Netherlands Agriculture / Food pending
    Ransomware formpipe.com id15663 View details Sweden Communication / Marketing pending
    Ransomware borohradek id15619 View details Czechia Public Sector pending
    Ransomware atfservices.com.au id15618 View details Australia Services pending
    Ransomware aclaser.com.au id15617 View details Australia Services pending
    Ransomware Nicholsons Solicitors id15616 View details United Kingdom Finance / Legal / Insurance pending
    Ransomware Hadwins Volkswagen id15615 View details United Kingdom Communication / Marketing pending
    Ransomware Pastor Real Estate id15602 View details United Kingdom Construction / Real Estate pending
    Ransomware Sa.SS Datentechnik id15601 View details Germany IT pending
    Ransomware Service Avicole JGL id15594 View details Canada Communication / Marketing pending
    Ransomware Darlington EMS id15593 View details United Kingdom Healthcare / Pharma pending
    Ransomware Schuck-Gruppe id32952 View details Germany Manufacturing / Engineering pending
    Ransomware IPE Engwicht id15585 View details Germany Public Sector pending
    Ransomware Alna-Bioscience id15582 View details Germany Healthcare / Pharma pending
    Ransomware Goldsmith & Hull id15569 View details United States Finance / Legal / Insurance pending
    Ransomware Brueck Golosow Kim & Associates id15568 View details United States Healthcare / Pharma leaked
    Ransomware United Bakery Equipment id15567 View details United States Communication / Marketing pending
    Ransomware Zimmerei Buder id15562 View details Austria Services pending
    Ransomware PBS AEROSPACE id15533 View details United States Communication / Marketing leaked
    Ransomware PHARMATIS-SAS id15344 View details France Healthcare / Pharma pending
    Ransomware vbuzrt.hu id15221 View details Hungary Finance / Legal / Insurance pending
    Ransomware europe-qualité id15208 View details France Public Sector pending
    Ransomware ucv.es id15203 View details Spain Communication / Marketing pending