Inc Ransom Ransomware — Victims, Campaigns & Activity

Threat entity extracted from intelligence sources

Frequency
20
occurrences
First Seen
November 17, 2025
Last Seen
July 9, 2026

Inc Ransom is a ransomware_group tracked across 13 threat clusters and 20 intelligence report mentions on ThreatCluster. First observed November 17, 2025; most recent activity July 9, 2026.

Related Threat Clusters

  • FortiBleed Campaign Links Credential Theft to Ransomware Operations

    The FortiBleed campaign has been linked to two ransomware groups, INC Ransom and Lynx, through an operational security lapse that revealed one actor's simultaneous access to both groups' negotiation panels. This…

    4 articles · Updated July 2, 2026
  • Beacon Mutual Insurance Company Data Breach Exposes Personal Information

    The Beacon Mutual Insurance Company reported a data breach involving unauthorized access to its network from January 7 to January 14, 2026. The breach compromised sensitive personal data, including names, Social…

    5 articles · Updated May 20, 2026
  • Ransomware Fuels Surge in Global Cyberattacks

    As of February 12, 2026, organizations worldwide are experiencing an average of 2,090 cyber-attacks per week, largely driven by ransomware incidents. This increase highlights the ongoing challenges faced by businesses…

    1542 articles · Updated February 12, 2026
  • Ransomware Attack Disrupts Emergency Alert Systems Nationwide

    The OnSolve CodeRED platform was targeted by the Inc Ransom ransomware group, leading to significant disruptions in local emergency alert systems across the United States. This attack has also resulted in a breach of…

    2 articles · Updated November 27, 2025
  • Trend Micro 2026 Cyber Risk Report Highlights Evolving Threat Landscape

    The Trend Micro 2026 Cyber Risk Report reveals insights from 2025 telemetry, indicating a global average Cyber Risk Index (CRI) decline from 38.5 to 35.8, reflecting ongoing medium risk levels across organizations. The…

    6 articles · Updated July 8, 2026
  • Pennington County Closes Offices Due to Cybersecurity Incident

    Pennington County, South Dakota, has closed most public offices following a cybersecurity incident impacting parts of its network. The closures are intended to allow staff to assess the situation and restore affected…

    2 articles · Updated July 6, 2026
  • Colorado Law Enforcement Agencies Reevaluate CodeRED Contracts After Cyber Attack

    Multiple Colorado law enforcement agencies are terminating or reassessing their contracts with CodeRED, an emergency alert system, following a cyber attack that compromised user data. The breach, confirmed by Crisis24,…

    18 articles · Updated November 25, 2025
  • Ransomware Attack in Pennsylvania Exposes Personal and Medical Data

    The Pennsylvania Attorney General's Office confirmed that a ransomware attack in August 2025, attributed to the INC ransomware group, resulted in the theft of personal information, including names, Social Security…

    43 articles · Updated November 18, 2025
  • Pennsylvania AG Confirms Ransomware Data Breach by INC Group

    The Pennsylvania Office of the Attorney General confirmed that personal and medical information was stolen during an August 2025 ransomware attack attributed to the INC ransomware-as-a-service operation. Although the…

    2 articles · Updated November 18, 2025
  • Queensland Law Firm Kelly Legal Targeted by INC Ransom Group

    The INC Ransom hacking group has claimed responsibility for stealing over 400 gigabytes of data from Kelly Legal, a law firm in Queensland. The breach reportedly includes compromised HR files and occurred following an…

    2 articles · Updated November 18, 2025

Recent Intelligence Reports

  • TrendAI™ 2026 Cyber Risk Report - Security Roundup — Trendmicro · July 9, 2026
  • TrendAI™ 2026 Cyber Risk Report | Trend Micro (GB) — Trendmicro · July 8, 2026
  • TrendAI™ 2026 Cyber Risk Report - Security Roundup — Trendmicro · July 8, 2026
  • TrendAI™ 2026 Cyber Risk Report| Trend Micro (ES) — Trendmicro · July 8, 2026
  • TrendAI™ 2026 Cyber Risk Report | Trend Micro (IT) — Trendmicro · July 8, 2026
  • Pennington County, SD Closes Offices After Cybersecurity Incident — Technadu · July 6, 2026
  • FortiBleed Actors Collaborating With Inc, Lynx Ransomware Gangs — Darkreading · July 2, 2026
  • Ctrl+Alt+Oops: FortiBleed criminal's logins stitch two gangs together — Theregister · July 2, 2026

CVSS v3.1 Breakdown