Ransomware Group intelligence

Incransom

Active

Track Incransom with 986 published victims and 7 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 986 Known published victims in this dataset
First discovered 2023-08-09 Earliest victim discovery date
Last discovered 2026-10-15 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 545 victims
Known locations 7 Leak or negotiation infrastructure tracked

Overview

Incransom is tracked by Breach House as a ransomware group with 986 published victims.

United States is currently the most targeted country in this dataset.

7 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 281 28.5%
  • Pending 702 71.2%
  • Deleted 3 0.3%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (7)

    Label Type Availability Links
    Leak location 6 Onion service Up checked 5h ago incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion
    Leak location 7 Onion service Up checked 5h ago incbacg6bfwtrlzwdbqc55gsfl763s3twdtwhp27dzuik6s6rwdcityd.onion
    Leak location 2 Onion service Down checked 5h ago incbackrlasjesgpfu5brktfjknbqoahe2hhmqfhasc5fb56mtukn4yd.onion
    Leak location 5 Web location Down checked 5h ago incapt.su
    Leak location 1 Onion service Down checked 5h ago incblog7vmuq7rktic73r4ha4j757m3ptym37tyvifzp2roedyyzzxid.onion
    Leak location 4 Web location Down checked 5h ago incapt.blog
    Leak location 3 Web location Down checked 5h ago incbackend.top

    Top Activity Sectors (18)

    Victims (986)

    Search, filter and paginate the victim timeline for Incransom. Showing 801–900 of 986.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware Webb Institute id15162 View details United States Education leaked
    Ransomware San Francisco Ballet id15141 View details United States Communication / Marketing pending
    Ransomware Doctors Regional Cancer Center id14722 View details United States Healthcare / Pharma pending
    Ransomware Storck-Baugesellschaft mbH id14605 View details Germany Construction / Real Estate leaked
    Ransomware Quantum Healthcare id14558 View details Singapore Healthcare / Pharma leaked
    Ransomware Divine Interprises INC id14497 View details United States Communication / Marketing leaked
    Ransomware DINAS Corp id14496 View details United States Communication / Marketing pending
    Ransomware Direct Access Partners id32955 View details United States Services pending
    Ransomware Visionary Homes id14398 View details United States Construction / Real Estate pending
    Ransomware Nusser Mineralöl GmbH id14373 View details Germany Other pending
    Ransomware OnePoint Patient Care id14290 View details United States Healthcare / Pharma leaked
    Ransomware Cathedral Prep (villalan.edu) id14257 View details United States Communication / Marketing pending
    Ransomware Regent Care Center id14250 View details United States Communication / Marketing pending
    Ransomware E-Z Pack Holdings LLC id14231 View details United States Communication / Marketing pending
    Ransomware San Francisco Sheriff's Department (sjcso.local) id14139 View details United States Public Sector leaked
    Ransomware ERoko Distributors + Colonial Countertops id14136 View details United States Communication / Marketing pending
    Ransomware The University and College Union id13980 View details United Kingdom Education leaked
    Ransomware Health Quality Council id13971 View details Canada Healthcare / Pharma leaked
    Ransomware HL Lawson & Sons id13966 View details United Kingdom Transportation / Travel / Logistics leaked
    Ransomware Don’t Waste Group id13948 View details United Kingdom Services leaked
    Ransomware Larc id13937 View details United States Communication / Marketing pending
    Ransomware Boombah Inc. id13749 View details Dominican Republic Communication / Marketing leaked
    Ransomware HP Distribution id13689 View details United States Communication / Marketing pending
    Ransomware Norther n Bedford County School District (nbcsc.org) id13532 View details Public Sector pending
    Ransomware maingroup id13487 View details Ireland Hospitality / Food & Beverage / Tourism pending
    Ransomware Association Management Strategies(AAMC.local) id13476 View details United States Services pending
    Ransomware CIMP.COM id13475 View details United States Healthcare / Pharma pending
    Ransomware A.L.P. Lighting Components id13403 View details United States Manufacturing / Engineering pending
    Ransomware The Coffee Bean & Tea Leaf id13336 View details United States Retail / E-commerce leaked
    Ransomware State of Alabama - Alabama Department Of Education id13335 View details Public Sector pending
    Ransomware erne id13334 View details Communication / Marketing pending
    Ransomware REPLIGEN id13294 View details United States Communication / Marketing pending
    Ransomware Guhring USA id13288 View details United States Communication / Marketing pending
    Ransomware Center for Human Capital Innovation (centerforhci.org) id13277 View details United States Communication / Marketing leaked
    Ransomware waupacacounty-wi.gov id13276 View details United States Public Sector leaked
    Ransomware waupaca.wi.us id13275 View details United States Public Sector pending
    Ransomware a4hs-dom.local id13209 View details Healthcare / Pharma leaked
    Ransomware Puyallup Tribe (ptoi.local) id13201 View details India Public Sector pending
    Ransomware City Of Coon Rapids id13200 View details United States Public Sector pending
    Ransomware Cambridge University Press & Assessment id13199 View details United States Communication / Marketing leaked
    Ransomware GBA GROUP id13191 View details Germany Transportation / Travel / Logistics pending
    Ransomware Planar id13161 View details United States Communication / Marketing leaked
    Ransomware middletown-township.org id13147 View details United States Other leaked
    Ransomware Maryhaven (MHCLINICAL.LOCAL) id13100 View details United States Healthcare / Pharma pending
    Ransomware Sacred Heart Community Service (shcstheheart.org) id13086 View details United States Communication / Marketing pending
    Ransomware Gorrie-Regan id13085 View details United States Communication / Marketing pending
    Ransomware Behavioral Health Response (bhr.local) id13073 View details United States Healthcare / Pharma leaked
    Ransomware DERBY SCHOOL id13066 View details United States Education pending
    Ransomware OCEANAIR id13056 View details United States Transportation / Travel / Logistics pending
    Ransomware Sensory Spectrum id13049 View details United States Services pending
    Ransomware Kito Canada id13005 View details Canada Public Sector pending
    Ransomware Rockford Public School District id12937 View details United States Education pending
    Ransomware CONTROLNET id12936 View details United States Construction / Real Estate pending
    Ransomware aloft id12919 View details Portugal Finance / Legal / Insurance leaked
    Ransomware Access Sports Medicine & Orthopaedics id12705 View details United States Healthcare / Pharma leaked
    Ransomware Crandall ISD (CISD.crandallisd.org) id12704 View details United States Education leaked
    Ransomware Audubon Nature Institute (auduboninstitute.org) id12694 View details United States Education pending
    Ransomware Hands TheFamilyHelpNetwork.ca id12685 View details Canada Communication / Marketing pending
    Ransomware Richland City Hall id12674 View details United States Public Sector pending
    Ransomware Midwest Covenant Home id12673 View details United States Healthcare / Pharma pending
    Ransomware First Nations Health Authority (fnha.local) id12672 View details United States Healthcare / Pharma pending
    Ransomware William S. Hein & Co. id12650 View details United States Public Sector pending
    Ransomware California Highway Patrol (SVEL237.org) id12628 View details United States Communication / Marketing pending
    Ransomware Regional Obstetrical Consultants id12626 View details United States Healthcare / Pharma pending
    Ransomware Delano Adult School (DJUHSD.ORG) id12625 View details United States Education pending
    Ransomware Specialty Market Managers id12624 View details United States Communication / Marketing pending
    Ransomware Sterling Transportation Services (sts.local) id12623 View details United States Transportation / Travel / Logistics leaked
    Ransomware Continuing Healthcare Solutions (chs.local) id12622 View details United States Healthcare / Pharma leaked
    Ransomware allied-mechanical-services-inc id12620 View details United States Services pending
    Ransomware drmsusa.com id12610 View details United States Communication / Marketing pending
    Ransomware aharvey.nf.ca id12594 View details Canada Energy pending
    Ransomware gravetye-manor id12546 View details United Kingdom Hospitality / Food & Beverage / Tourism pending
    Ransomware Talley Group id12538 View details United Kingdom Communication / Marketing pending
    Ransomware Eden Project Ltd id12526 View details United Kingdom Communication / Marketing pending
    Ransomware Helapet Ltd id12525 View details United Kingdom Healthcare / Pharma pending
    Ransomware Eden Project id12519 View details United Kingdom Communication / Marketing pending
    Ransomware Seaman's Mechanical id12505 View details United States Manufacturing / Engineering pending
    Ransomware Deeside Timberframe id12504 View details United Kingdom Construction / Real Estate pending
    Ransomware NHS (press update) id12499 View details United Kingdom Communication / Marketing pending
    Ransomware Pinnacle Orthopaedics id12402 View details United States Healthcare / Pharma pending
    Ransomware Softura id12400 View details United States Manufacturing / Engineering pending
    Ransomware Electric Mirror Inc id12391 View details United States Hospitality / Food & Beverage / Tourism pending
    Ransomware Fribin id12383 View details Spain Communication / Marketing pending
    Ransomware Electric Mirror id12381 View details United States Communication / Marketing pending
    Ransomware City of Buckeye (buckeyeaz.gov) id12374 View details United States Public Sector pending
    Ransomware JFK Financial Inc. id12348 View details United States Finance / Legal / Insurance pending
    Ransomware NELLESFRERES id12337 View details Belgium Communication / Marketing pending
    Ransomware Seneca Nation Health System id12288 View details India Healthcare / Pharma pending
    Ransomware Mainline Health Systems (MHS.local) id12269 View details United States Healthcare / Pharma pending
    Ransomware US-Saudi Arabian Business Council id12252 View details Saudi Arabia Finance / Legal / Insurance pending
    Ransomware It4 Solutions Robras Corp id12232 View details United States Services leaked
    Ransomware Trylon Srl id12231 View details Romania IT leaked
    Ransomware Sobieski Services Inc id12230 View details United States Services leaked
    Ransomware Human Technology Inc. id12170 View details United States IT pending
    Ransomware Continuing Healthcare Solutions id12077 View details United States Healthcare / Pharma pending
    Ransomware Lutheran Social Services of Indiana id12076 View details India Services pending
    Ransomware Delano Joint Union High School District id11710 View details United States Education pending
    Ransomware Druckman Law Group id11679 View details United States Finance / Legal / Insurance pending
    Ransomware Pulaski academy id11678 View details United States Education pending
    Ransomware Community Alliance id11612 View details United States Services pending