Skip to content
Leak-site post naming Wavecrest HFA, captured by ThreatCluster

Wavecrest HFA

incransom

Ransomware leak-site victim intelligence

Data size
23,991,067,648 bytes
Files
12,143
Views
4,569
Posted
Jul 10, 2026
Publication
Jul 10, 2026
Country
US
Industry
Financial Services

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

Incransom claims Wavecrest HFA’s data totaling 23,991,067,648 bytes across 12,143 files was taken, including contracts, financial data, confidential records, and HR. The leak page identifies the victim as Wavecrest HFA and lists revenue at $1 million. The post is published and shows a countdown of 5d 18h 42m 54s, with the data status shown as FULL.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

Wavecrest HFA entry showing Revenue: 1M$; Encrypted Views 1145; 12,143 Files, 267 Folders; 23,991,067,648 bytes; Data categories: Contracts, Financial data, Confidential, HR; Status: FULL; Timeline uses 07.10.2026 15:23-15:24

Data categories
ContractsFinancial dataConfidentialHR

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Encrypted
Yes

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture