RANSOMWARE VICTIMMANUFACTURING

Oztugotomotiv

INCRANSOM📍 TR (TR)📅 June 3, 2026
8
same group

Attack Intelligence

Oztugotomotiv was compromised in a ransomware attack attributed to INCRANSOM in June 2026. The organization, operating in the Manufacturing sector in TR, was added to the group's data leak site as part of an extortion campaign.

INCRANSOM operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Öztuğ Otomotiv & Endüstri is a Turkish company established in 1990 in Bursa, specializing in the production of high-precision components for the automotive, industrial, defense, and aerospace sectors. The company offers comprehensive services including design, mold manufacturing, and serial production of plastic, metal, and rubber parts, as well as industrial seals and vibration dampers. Öztuğ Otomotiv utilizes modern equipment (high-tonnage presses, progressive dies) and adheres to international quality standards, including a zero-defect principle and compliance with OEM standards. Financial performance (not publicly disclosed, but the company positions itself as a stable business): As of 2025, the company reports over 35 years of successful operations, more than 300 employees, and three production facilities with a total enclosed area of 12,000 m². Structure and facilities: The company operates three production sites in Hasantığla, Nilüfer (Bursa), and Adapazarı. As of 2025, the workforce comprises over 300 specialists. Production capabilities include plastic injection, metal forming, and rubber molding lines. Laek: 100GB WE HAS COLLECTED SUCH DATA AS: - Confidential documents - Clients Data - NDA - Financial data - Operations - Corporate data - Business Agreements - Development - Financial databases, all transactions, all clients And a lot of other VERY IMPORTANT information!

Additional Details

Other Victims — INCRANSOM (8)

Quick Facts

CountryTR (TR)
SectorManufacturing
Attack DateJun 3, 2026
Intel Sourceransomware.live

Threat Group

INCRANSOM
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.