Summary
Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot, our reportingThe qilin group claims Incrys, a Business Services firm, is the victim; the leak page identifies the domain www.incrys.com and sector as Business Services. The page also includes a TOX hash and a WikileaksV2 reference. The leak post is published/listed, and our coverage notes broader September 2026 ransomware activity attributed to Qilin, with victims such as laconcepcion.com.mx and Wiggins, Childs, Pantazis, Fisher, & Goldfarb.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Domains
- http://www.incrys.com
What was taken
Incrys - Business Services
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- TOX
- 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
- WikileaksV2
- https://wikileaks2.com/
Leak-site images (2)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.