RANSOMWARE VICTIM⚠ DUPLICATE CLAIM
omrania
INCRANSOM📍 SA (SA)📅 December 28, 2025
8
same group
Attack Intelligence
omrania was compromised in a ransomware attack attributed to INCRANSOM in December 2025. The organization, operating in an undisclosed sector in SA, was added to the group's data leak site as part of an extortion campaign.
INCRANSOM operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
Omrania Website:www.omrania.com WE HAS COLLECTED SUCH DATA AS: - Confidential documents - Clients Data - NDA - Financial data - Corporate data - Business Agreements - Projects - Drawings - Total: 4000GB And a lot of other VERY IMPORTANT information!
Additional Details
Other Victims — INCRANSOM (8)
Louisville Bar Association
US · Professional Services
Aug 2026
ATMS
IN · Transportation
Aug 2026
Loyalist College
CA · Education
Aug 2026
lantisnet.com
US · Technology
Aug 2026
vprj.org
US · Not Found
Aug 2026
https://geleximco.vn/
VN · Manufacturing
Aug 2026
lccgroup.com
PH · Professional Services
Aug 2026
pushidrosal.id
ID · Other
Aug 2026
Quick Facts
CountrySA (SA)
Attack DateDec 28, 2025
Intel Sourceransomware.live
StatusDUPLICATE CLAIM
Threat Group
External Links
Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.