Skip to content
Leak-site post naming INCOR Group, captured by ThreatCluster

INCOR Group

doommageddon

Ransomware leak-site victim intelligence · EN

Data size
17.21 GB
Files
7,860
Views
7,860
Posted
Sep 13, 2026
Countdown
Deadline Sep 20, 2026
Country
India
Industry
Real estate management; healthcare

Summary

Written by ThreatClusterfrom victim profile, leak post, screenshot, our reporting

The DOOMMAGEDDON group claims 17.21 GB of INCOR Group data was exfiltrated, and the leak page is in countdown status with a deadline of Sep 20, 2026. The leak page identifies the victim as INCOR Group, an India-based real estate management and healthcare firm. The materials are described as including HR and recruitment records, internal documentation and source code.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Founded
2006

What was taken

Incor began its journey in 2006 when the founders recognized a huge gap in the way real estate was being approached in India. Founded with the aim to provide professional real-estate management, our vision paid returns almost immediately, attracting a partnership with two well-known Israeli companies - Property and Building Corporation (PBC) and Electra Real Estate (ERE) - resulting in the formation of PBEL Property Development (India) Pvt. Ltd. In 2010, INCOR then began its foray into the healthcare sector. Fuck Israel #freegaza

Leak site tags
Incident disclosureupcomingDirectory locked

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Directory locked
Available after 2026-09-20 00:00:00 UTC

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture