Ransomware Group: INCRANSOM

VICTIM NAME: dwllp[.]ca/ Leaked by www[.]etornetworks[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the INCRANSOM Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page reports a security incident involving a company based in Canada. The attack was discovered on July 14, 2025, and hackers claimed responsibility through a dark web blog link. The breach was achieved by gaining unauthorized access to the target’s internal files, as mentioned in the leak description. The leaked data appears to include internal documents or files, possibly compromising sensitive information stored by the organization. The incident was publicly disclosed by a hacking group identified as “incransom.” The leak is accessible via a dark web URL, though no direct download links are provided in the summary. The company’s online presence and specific details about the extent of data exposure remain unspecified. The screenshot data is not available, but the description suggests potential exposure of internal files and operational details.

The leak indicates that the affected organization is identified by its domain, but specific company details are not provided. The attack demonstrates the increasing danger of cyber intrusions targeting organizational infrastructure, with post-compromise data being published on dark web platforms. The geographic focus is Canada, highlighting the ongoing threat landscape within that region. No personally identifiable information or proprietary data is explicitly mentioned in the summary, emphasizing the importance of cybersecurity vigilance. The incident underscores the need for organizations to monitor dark web activities and strengthen their security measures to prevent similar breaches in the future.