INC ransomware opsec fail allowed data recovery for 12 US orgs

Databreaches •Dissent • January 23, 2026

Bill Toulas reports: An operational security failure allowed researchers to recover data that the INC ransomware gang stole from a dozen U.S. organizations. A deep forensic examination of the artifacts left behind uncovered tooling that had not been used in the investigated attack, but exposed attacker infrastructure that stored data exfiltrated from multiple victims. The... Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Data Recovery Achieved from INC Ransomware Opsec Failure An operational security failure by the INC ransomware gang allowed researchers to recover data stolen from 12 U.S. organizations. A forensic examination revealed unused tooling and exposed attacker infrastructure that stored exfiltrated data from multiple victims. 2 sources 31

INC ransomware opsec fail allowed data recovery for 12 US orgs

The full story

Extracted Entities

Attack Types (1)

Ransomware Groups (1)