Ransomware Group: INCRANSOM

VICTIM NAME: cemeteries[.]local

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the INCRANSOM Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page pertains to a victim organization operating under the domain cemeteries.local, based in Canada. This organization offers burial and cremation services within the Catholic community, emphasizing compassionate care, respect for tradition, and providing pre-arranged memorial options. The attack was identified on June 4, 2025, and the discovery was made shortly thereafter, indicating active malicious activity involving data compromise. The leak page includes a screenshot of the affected system, which appears to show internal documents or interface elements related to the organization’s operations. Additionally, a link to a blog post with further disclosures is provided for more details. The incident is associated with an organized ransomware group, indicating a targeted effort to encrypt or exfiltrate sensitive data.

While specific details about the nature of the compromised information are not publicly disclosed, the presence of a dedicated leak page suggests that sensitive data such as internal records or customer information may have been accessed or extracted. No personally identifiable information or specific data points are visible in the summary. The attack underscores the cybersecurity risks facing organizations involved in handling confidential services for the public, especially within sectors like religious and community services. The victim operates in the consumer services industry within Canada, and the incident highlights the importance of robust cybersecurity measures to prevent data breaches. The leak site provides a visual screenshot confirming organized data exfiltration activities and includes a link to further disclosures for those seeking additional insights into the breach.