Skip to content
Leak-site post naming Wolf & Sofsky GmbH, captured by ThreatCluster

Wolf & Sofsky GmbH

incransom

Ransomware leak-site victim intelligence · DE

Data size
323 GB
Files
185,672
Views
3,307
Posted
Oct 13, 2026
Publication
Oct 13, 2026
Countdown
8d 12h : 32m : 4s
Country
Germany
Industry
Construction

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot

Incransom claims to have stolen 323 GB of data from Wolf & Sofsky GmbH, comprising 185,672 files. The data categories claimed include contracts, confidential data, financial data, HR records, and incident reports. The leak post identifies Wolf & Sofsky GmbH as a German construction company based in Zweibrücken. The page is published and shows a countdown of 8d 12h 32m 4s.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

Wolf & Sofsky GmbH is a construction company with a 75-year history, based in Zweibrücken, Germany. The company operates on highly complex projects and maintains a significant financial position.

Data categories
ContractsConfidentialFinancial dataHRIncidents
Leak site tags
AD DumpProof

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Tel.
+49 6332 916-0; +49 6332 916-141; +49 6332 916-136; +49 6332 916-158

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture