Ransomware Group intelligence

Incransom

Active

Track Incransom with 909 published victims and 7 known leak locations in a single intelligence view.

Victims 909 Known published victims in this dataset
First discovered 2023-08-09 Earliest victim discovery date
Last discovered 2026-07-18 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 504 victims
Known locations 7 Leak or negotiation infrastructure tracked

Overview

Incransom is tracked by Breach House as a ransomware group with 909 published victims.

United States is currently the most targeted country in this dataset.

7 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (7)

    Label Type Availability Links
    Leak location 1 Onion service Unknown incblog7vmuq7rktic73r4ha4j757m3ptym37tyvifzp2roedyyzzxid.onion
    Leak location 2 Onion service Unknown incbackrlasjesgpfu5brktfjknbqoahe2hhmqfhasc5fb56mtukn4yd.onion
    Leak location 3 Web location Unknown incbackend.top
    Leak location 4 Web location Unknown incapt.blog
    Leak location 5 Web location Unknown incapt.su
    Leak location 6 Onion service Unknown incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion
    Leak location 7 Onion service Unknown incbacg6bfwtrlzwdbqc55gsfl763s3twdtwhp27dzuik6s6rwdcityd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (909)

    Search, filter and paginate the victim timeline for Incransom. Showing 701–800 of 909.

    Type Target Discovered Country Business Category Intel Link
    Ransomware visufarma.com id15707 View details Netherlands Agriculture / Food
    Ransomware formpipe.com id15663 View details Sweden Communication / Marketing
    Ransomware borohradek id15619 View details Czechia Public Sector
    Ransomware atfservices.com.au id15618 View details Australia Services
    Ransomware aclaser.com.au id15617 View details Australia Services
    Ransomware Nicholsons Solicitors id15616 View details United Kingdom Finance / Legal / Insurance
    Ransomware Hadwins Volkswagen id15615 View details United Kingdom Communication / Marketing
    Ransomware Pastor Real Estate id15602 View details United Kingdom Construction / Real Estate
    Ransomware Sa.SS Datentechnik id15601 View details Germany IT
    Ransomware Service Avicole JGL id15594 View details Canada Communication / Marketing
    Ransomware Darlington EMS id15593 View details United Kingdom Healthcare / Pharma
    Ransomware Schuck-Gruppe id15592 View details Germany Construction / Real Estate
    Ransomware IPE Engwicht id15585 View details Germany Public Sector
    Ransomware Alna-Bioscience id15582 View details Germany Healthcare / Pharma
    Ransomware Goldsmith & Hull id15569 View details United States Finance / Legal / Insurance
    Ransomware Brueck Golosow Kim & Associates id15568 View details United States Healthcare / Pharma
    Ransomware United Bakery Equipment id15567 View details United States Communication / Marketing
    Ransomware Zimmerei Buder id15562 View details Austria Services
    Ransomware PBS AEROSPACE id15533 View details United States Communication / Marketing
    Ransomware PHARMATIS-SAS id15344 View details France Healthcare / Pharma
    Ransomware vbuzrt.hu id15221 View details Hungary Finance / Legal / Insurance
    Ransomware europe-qualité id15208 View details France Public Sector
    Ransomware ucv.es id15203 View details Spain Communication / Marketing
    Ransomware Webb Institute id15162 View details United States Education
    Ransomware San Francisco Ballet id15141 View details United States Communication / Marketing
    Ransomware Doctors Regional Cancer Center id14722 View details United States Healthcare / Pharma
    Ransomware Storck-Baugesellschaft mbH id14605 View details Germany Construction / Real Estate
    Ransomware Quantum Healthcare id14558 View details Singapore Healthcare / Pharma
    Ransomware Divine Interprises INC id14497 View details United States Communication / Marketing
    Ransomware DINAS Corp id14496 View details United States Communication / Marketing
    Ransomware Direct Access Partners id14481 View details United States Services
    Ransomware Visionary Homes id14398 View details United States Construction / Real Estate
    Ransomware Nusser Mineralöl GmbH id14373 View details Germany Other
    Ransomware OnePoint Patient Care id14290 View details United States Healthcare / Pharma
    Ransomware Cathedral Prep (villalan.edu) id14257 View details United States Communication / Marketing
    Ransomware Regent Care Center id14250 View details United States Communication / Marketing
    Ransomware E-Z Pack Holdings LLC id14231 View details United States Communication / Marketing
    Ransomware San Francisco Sheriff's Department (sjcso.local) id14139 View details United States Public Sector
    Ransomware ERoko Distributors + Colonial Countertops id14136 View details United States Communication / Marketing
    Ransomware The University and College Union id13980 View details United Kingdom Education
    Ransomware Health Quality Council id13971 View details Canada Healthcare / Pharma
    Ransomware HL Lawson & Sons id13966 View details United Kingdom Transportation / Travel / Logistics
    Ransomware Don’t Waste Group id13948 View details United Kingdom Services
    Ransomware Larc id13937 View details United States Communication / Marketing
    Ransomware Boombah Inc. id13749 View details Dominican Republic Communication / Marketing
    Ransomware HP Distribution id13689 View details United States Communication / Marketing
    Ransomware Norther n Bedford County School District (nbcsc.org) id13532 View details Public Sector
    Ransomware maingroup id13487 View details Ireland Hospitality / Food & Beverage / Tourism
    Ransomware Association Management Strategies(AAMC.local) id13476 View details United States Services
    Ransomware CIMP.COM id13475 View details United States Healthcare / Pharma
    Ransomware A.L.P. Lighting Components id13403 View details United States Manufacturing / Engineering
    Ransomware The Coffee Bean & Tea Leaf id13336 View details United States Retail / E-commerce
    Ransomware State of Alabama - Alabama Department Of Education id13335 View details Public Sector
    Ransomware erne id13334 View details Communication / Marketing
    Ransomware REPLIGEN id13294 View details United States Communication / Marketing
    Ransomware Guhring USA id13288 View details United States Communication / Marketing
    Ransomware Center for Human Capital Innovation (centerforhci.org) id13277 View details United States Communication / Marketing
    Ransomware waupacacounty-wi.gov id13276 View details United States Public Sector
    Ransomware waupaca.wi.us id13275 View details United States Public Sector
    Ransomware a4hs-dom.local id13209 View details Healthcare / Pharma
    Ransomware Puyallup Tribe (ptoi.local) id13201 View details India Public Sector
    Ransomware City Of Coon Rapids id13200 View details United States Public Sector
    Ransomware Cambridge University Press & Assessment id13199 View details United States Communication / Marketing
    Ransomware GBA GROUP id13191 View details Germany Transportation / Travel / Logistics
    Ransomware Planar id13161 View details United States Communication / Marketing
    Ransomware middletown-township.org id13147 View details United States Other
    Ransomware Maryhaven (MHCLINICAL.LOCAL) id13100 View details United States Healthcare / Pharma
    Ransomware Sacred Heart Community Service (shcstheheart.org) id13086 View details United States Communication / Marketing
    Ransomware Gorrie-Regan id13085 View details United States Communication / Marketing
    Ransomware Behavioral Health Response (bhr.local) id13073 View details United States Healthcare / Pharma
    Ransomware DERBY SCHOOL id13066 View details United States Education
    Ransomware OCEANAIR id13056 View details United States Transportation / Travel / Logistics
    Ransomware Sensory Spectrum id13049 View details United States Services
    Ransomware Kito Canada id13005 View details Canada Public Sector
    Ransomware Rockford Public School District id12937 View details United States Education
    Ransomware CONTROLNET id12936 View details United States Construction / Real Estate
    Ransomware aloft id12919 View details Portugal Finance / Legal / Insurance
    Ransomware Access Sports Medicine & Orthopaedics id12705 View details United States Healthcare / Pharma
    Ransomware Crandall ISD (CISD.crandallisd.org) id12704 View details United States Education
    Ransomware Audubon Nature Institute (auduboninstitute.org) id12694 View details United States Education
    Ransomware Hands TheFamilyHelpNetwork.ca id12685 View details Canada Communication / Marketing
    Ransomware Richland City Hall id12674 View details United States Public Sector
    Ransomware Midwest Covenant Home id12673 View details United States Healthcare / Pharma
    Ransomware First Nations Health Authority (fnha.local) id12672 View details United States Healthcare / Pharma
    Ransomware William S. Hein & Co. id12650 View details United States Public Sector
    Ransomware California Highway Patrol (SVEL237.org) id12628 View details United States Communication / Marketing
    Ransomware Regional Obstetrical Consultants id12626 View details United States Healthcare / Pharma
    Ransomware Delano Adult School (DJUHSD.ORG) id12625 View details United States Education
    Ransomware Specialty Market Managers id12624 View details United States Communication / Marketing
    Ransomware Sterling Transportation Services (sts.local) id12623 View details United States Transportation / Travel / Logistics
    Ransomware Continuing Healthcare Solutions (chs.local) id12622 View details United States Healthcare / Pharma
    Ransomware allied-mechanical-services-inc id12620 View details United States Services
    Ransomware drmsusa.com id12610 View details United States Communication / Marketing
    Ransomware aharvey.nf.ca id12594 View details Canada Energy
    Ransomware gravetye-manor id12546 View details United Kingdom Hospitality / Food & Beverage / Tourism
    Ransomware Talley Group id12538 View details United Kingdom Communication / Marketing
    Ransomware Eden Project Ltd id12526 View details United Kingdom Communication / Marketing
    Ransomware Helapet Ltd id12525 View details United Kingdom Healthcare / Pharma
    Ransomware Eden Project id12519 View details United Kingdom Communication / Marketing
    Ransomware Seaman's Mechanical id12505 View details United States Manufacturing / Engineering