Ransomware Group: INCRANSOM

VICTIM NAME: Devon

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the INCRANSOM Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak appears to be associated with a victim located in Canada, specifically in the activity sector of energy. The breach was publicly disclosed on July 31, 2025, with the incident occurring on the same date. The leak page includes visual evidence such as a screenshot linked to the victim’s case. Several documents and files may have been exposed or leaked, although specific details are not provided in the current data. The site mentions the potential presence of downloadable data or files related to the incident, but no direct URLs or file types are detailed. This breach underscores ongoing cybersecurity threats facing organizations within this industry and geography.

The page includes a neutral visual presentation, likely including screenshots of internal materials, but it does not specify explicit content or sensitive information beyond the leak itself. No personally identifiable information was noted in the available data. The incident’s disclosure date being in 2025 indicates this is a recent or ongoing threat, emphasizing the importance of robust security measures. The targeted organization, “Devon,” is involved in the energy sector within Canada, and the breach might impact associated stakeholders or operations. No additional personal or confidential details are shared, aligning with responsible reporting standards for such leaks.