Privacy UnpackedRansomware gang
INC Ransom (also tracked as Inc Ransom)
Claims on its leak site since 9 August 2023, number 4 of all gangs in the last 12 months
- Claims, 12 months
- 473
- Last 30 days
- 31
- All claims
- 979
- Last claim
- 22 October 2026
Where its claimed victims are
Sectors
Claims matched to an official notice
18 organisations INC Ransom claimed also filed a breach notice with a regulator, 15 of them after the claim (a median of 71 days later). Matched by name: the notice does not say who the attacker was.
- Cardinal Services LLC
Claimed 18 September 2025 · notice filed with the Texas Attorney General 11 September 2026 - Life Bridges, Inc.
Claimed 25 June 2026 · notice filed with the US Department of Health and Human Services 20 August 2026 - The Beacon Mutual Insurance Company
Claimed 31 January 2026 · notice filed with the California Attorney General 18 May 2026 - Rainier Clinical Research Center
Claimed 23 February 2026 · notice filed with the Washington Attorney General 3 April 2026 - OSI Systems, Inc.
Claimed 30 December 2025 · notice filed with the California Attorney General 11 March 2026 - OB-GYN Associates
Claimed 30 August 2025 · notice filed with the California Attorney General 29 October 2025 - Georgetown Brewing Company
Claimed 9 October 2025 · notice filed with the Washington Attorney General 26 September 2025 - Monterey Mushrooms, LLC
Claimed 4 September 2025 · notice filed with the California Attorney General 18 September 2025 - Washington Gastroenterology
Claimed 17 January 2025 · notice filed with the Washington Attorney General 23 May 2025 - Cambridge University Press & Assessment
Claimed 29 June 2024 · notice filed with the California Attorney General 23 April 2025 - Youth Eastside Services
Claimed 8 January 2025 · notice filed with the Washington Attorney General 20 December 2024 - OnePoint Patient Care
Claimed 15 September 2024 · notice filed with the California Attorney General 23 October 2024 - New York School of Interior Design
Claimed 16 December 2023 · notice filed with the California Attorney General 9 July 2024 - Ingo Money, Inc.
Claimed 23 November 2023 · notice filed with the Washington Attorney General 2 July 2024 - Electric Mirror LLC
Claimed 8 May 2024 · notice filed with the Washington Attorney General 3 May 2024 - Elemetal, LLC
Claimed 18 September 2023 · notice filed with the California Attorney General 1 March 2024 - UNITE HERE
Claimed 20 December 2023 · notice filed with the California Attorney General 23 February 2024 - Greenpoint Technologies, Inc.
Claimed 17 October 2023 · notice filed with the Washington Attorney General 17 October 2023
What a claim is, and is not
A claim is a ransomware gang naming an organisation on its leak site, usually to pressure it into paying. It is the gang’s word: some claims are false, recycled from older breaches or exaggerated, and a claim says nothing about whose personal data, if any, was taken. That is why we count claims but do not list the organisations, and why a breach goes on the tracker as confirmed only when the organisation or a regulator says so.
How this is counted
Claims as collected from the gangs’ leak sites by ransomware.live, which says itself that they are unverified. We read its list every day and keep only counts: by month, by the victim’s country and by sector (as ransomware.live classifies them). Matches with official notices are by the organisation’s name, from 30 days before the claim to a year after it, against California’s and Washington’s full breach registers and every official notice on the tracker. A match is not a confirmation rate: those registers only see breaches of their own residents, and names are written differently. We never link to or visit leak sites.
From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.