V&P Nurseries
Attack Intelligence
V&P Nurseries was compromised in a ransomware attack attributed to INCRANSOM in July 2026. The organization, operating in the Agriculture and Food Production sector in United States, was added to the group's data leak site as part of an extortion campaign.
INCRANSOM operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
V&P Nurseries is an Arizona-based wholesale grower specializing in drought-tolerant, subtropical, and desert-adapted plants for landscapes across the Southwest. Established in 1978, the company operates production facilities and a tissue culture lab focused on sustainable, water-conservative horticulture. For more information,