Ransomware Group: INCRANSOM

VICTIM NAME: www[.]lincecomercial[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the INCRANSOM Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The leak page indicates that the company operating the website www.lincecomercial.com, based in Colombia, has been impacted by a ransomware attack. The attack date is recorded as July 24, 2025, suggesting the incident occurred recently and was publicly disclosed shortly after. The organization is involved in the Cable & Satellite industry, which may have sensitive operational or customer data at risk. The leak includes a screenshot of internal content or documents, emphasizing the severity of the breach. The accessible claim URL points to an onion site dedicated to disclosing the incident, containing further details about the compromise. While specific stolen data is not detailed here, the leak suggests that valuable information has been made public, potentially affecting both the company’s operations and its customers.

The page includes general information and visual proof of the breach, such as a relevant screenshot, possibly showing internal documents or communications. No personally identifiable information or sensitive details have been included in this summary. The disclosure serves as a warning of the security lapse and highlights the importance of cybersecurity measures within organizations in the industry. The attack’s timing and public exposure underscore the need for vigilance and incident response planning to prevent future compromises or mitigate their impact effectively. The leak URL indicates it was associated with a group or campaign known as “incransom,” emphasizing the broader threat landscape around ransomware activities.