rift.cysentrix
← Back to actors

Threat actor

INC Ransom

39 observed events

AIINC Ransom was observed in seven ransomware incidents targeting the Consumer Services and Healthcare sectors in the US (2), Mexico (1), and Germany (1).

Activity type

Ransomware
39

Verification

Claim
39

Top sectors

Manufacturing
6
Healthcare
5
Technology
4
Other
3
Professional Services
3

Top countries

US
15
CH
2
PH
2
TW
2
VN
2

Observed events

Claim High Ransomware

vprj.org

AIINC Ransom claims to have listed vprj.org on its extortion site, per RansomLook. This is an unverified claim.

Actor INC Ransom 1 source
Records Undisclosed
Claim High Ransomware

vprj.org

AIINC Ransom has listed vprj.org on its extortion site, according to Ransomware.live. This is an unverified claim of a data leak; no details are confirmed.

Actor INC Ransom 1 source
Records Undisclosed
Claim High Ransomware

Loyalist College

AIINC Ransom has listed Loyalist College on its extortion site, claiming to have breached the organization. The claim is unverified; no further details were provided in the metadata.

Actor INC Ransom 1 source
Records Undisclosed
Claim High Ransomware

TRULITE GLASS & ALUMINUM SOLUTIONS

AIINC Ransom claims to have listed TRULITE GLASS & ALUMINUM SOLUTIONS on its extortion site, per RansomLook. This is an unverified claim, not a confirmed breach.

Actor INC Ransom 1 source
Records Undisclosed
Claim High Ransomware

lantisnet.com

AIINC Ransom has listed lantisnet.com, a technology-sector firm, on its extortion site, claiming to possess stolen data. This is an unverified claim.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

Loyalist College

AIINC Ransom claims to have listed Loyalist College, an education-sector organization, on its extortion site. The claim is unverified.

Actor INC Ransom 1 source
Records Undisclosed
Claim High Ransomware

TRULITE GLASS & ALUMINUM SOLUTIONS

AIINC Ransom claims to have listed TRULITE GLASS & ALUMINUM SOLUTIONS, a manufacturing firm, on its extortion site. This is an unverified claim.

Actor INC Ransom 1 source
Records Undisclosed
Claim High Ransomware

pushidrosal.id

AIINC Ransom claims to have listed pushidrosal.id (sector: Other) on its extortion site, per Ransomware.live. This is an unverified claim.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

lccgroup.com

AIINC Ransom claims to have listed lccgroup.com (Professional Services) on its extortion site, per Ransomware.live. This is an unverified claim.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

https://geleximco.vn/

AIINC Ransom has listed Vietnamese manufacturer Geleximco (geleximco.vn) on its extortion site, claiming to hold stolen data. This claim is unverified.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

clintonhealthaccess.org

AIINC Ransom has listed clintonhealthaccess.org, a healthcare organization, on its extortion site, per Ransomware.live. This is an unverified claim of a data leak, not a confirmed breach.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

Oleoductos del Valle

AIINC Ransom claims to have listed energy firm Oleoductos del Valle on its extortion site. This is an unverified claim.

Actor INC Ransom 1 source
Records Undisclosed
Claim High Ransomware

ecfa.org

AIINC Ransom claims to have listed ecfa.org, a Professional Services organization, on its extortion site. Status: unverified.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

quantinuum.com

AIINC Ransom claims to have listed quantinuum.com on its extortion site, per RansomLook. This is an unverified claim.

Actor INC Ransom 1 source
Records Undisclosed
Claim High Ransomware

quantinuum.com

AIINC Ransom has listed quantinuum.com on its extortion site, claiming a breach in the Technology sector. This is an unverified claim per Ransomware.live; no details are confirmed.

Actor INC Ransom 1 source
Records Undisclosed
Claim High Ransomware

PARTNERED HEALTH GROUP

AIINC Ransom claims to have listed PARTNERED HEALTH GROUP, a healthcare organization.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

sslf.local

AIINC Ransom claims to have listed sslf.local on its extortion site per RansomLook, though this claim is unverified.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

harwal.net

AIINC Ransom claims to have breached harwal.net, according to a listing on Ransomware.live. This claim is unverified.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

https://eclmn.com/

AIINC Ransom listed Eclmn.com on its extortion site, claiming a breach.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

Della Casa Group AG

AIINC Ransom claims to have data from Della Casa Group AG, per an unverified listing on Ransomware.live.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

greenecountyga.gov

AIINC Ransom claims to have data from greenecountyga.gov, listed on RansomLook as an unverified claim.

Actor INC Ransom 1 source
Records Undisclosed
Claim High Ransomware

minigrip.com.mx

AIINC Ransom claims to have targeted minigrip.com.mx, a manufacturing firm, according to a listing on Ransomware.live.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

DUCON

AIINC Ransom claims to have listed DUCON, a manufacturing company, on its extortion site, per Ransomware.live.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

foundationstofreedom.org

AIINC Ransom claims to have breached foundationstofreedom.org, per Ransomware.live extortion listing; claim unverified.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

takethehop.com

AIINC Ransom claims to have breached takethehop.com in the hospitality sector, per an unverified listing on Ransomware.live.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

healthlawadvocates.org

AIINC Ransom claims to have attacked healthlawadvocates.org, a Professional Services firm, as listed on Ransomware.live.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

autismuslink.ch

AIThe INC Ransom extortion group has listed autismuslink.ch (healthcare) on their leak site, claiming a breach.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

cabincreekhealth.com

AIINC Ransom claims to have breached cabincreekhealth.com, a healthcare entity, per an extortion listing on Ransomware.live. The claim is unverified.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

Ali-Monde

AIINC Ransom claims to have listed Ali-Monde on its extortion site, but this claim is unverified.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

pokka.co

AIINC Ransom claims to have breached pokka.co, as per an unverified listing on RansomLook.

Actor INC Ransom 1 source
Records Undisclosed
Claim High Ransomware

v-silicon.com

AIINC Ransom claims to have breached v-silicon.com, a technology company, according to a listing on Ransomware.live.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

FAST.COM.PH

AIUnverified claim: INC Ransom claims to have listed FAST.COM.PH, a technology organization, on its extortion site.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

D.MAG New Material Technology Co., Ltd. Taiwan Giant

AIINC Ransom claims to have listed D.MAG New Material Technology Co., Ltd. Taiwan Giant, a manufacturing company, on its extortion

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

vedan corp

AIINC Ransom claims to have breached Vedan Corp, an agriculture and food production firm. The claim is unverified.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

reatile.co.za

AIINC Ransom claims to have data from reatile.co.za, listed on Ransomware.live (unverified claim).

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

V&P Nurseries

AIINC Ransom claims to have data from V&P Nurseries, an agriculture and food production firm, as per a listing on its extortion site. Unverified.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

Kyokuto Kaihatsu Kogyo

AIINC Ransom claims to have targeted Kyokuto Kaihatsu Kogyo, a manufacturing company, according to a listing on Ransomware.live.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

asa-international.com

AIINC Ransom claims to have compromised asa-international.com (Business Services) per Ransomware.live listing.

Actor INC Ransom 2 sources
Records Undisclosed
Claim High Ransomware

https://www.statebankofnauvoo.com/

AIINC Ransom claims to have listed State Bank of Nauvoo on its extortion site, per RansomLook; the claim is unverified.

Actor INC Ransom 2 sources
Records Undisclosed