RANSOMWARE VICTIMFINANCIAL SERVICES

Colina Financial Advisors

INCRANSOM📍 BS (BS)📅 June 1, 2026
8
same group

Attack Intelligence

Colina Financial Advisors was compromised in a ransomware attack attributed to INCRANSOM in June 2026. The organization, operating in the Financial Services sector in BS, was added to the group's data leak site as part of an extortion campaign.

INCRANSOM operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Colina Financial Advisors Limited (CFAL) is a prominent, independent wealth management and investment advisory firm based in Nassau, The Bahamas. Established in 1997, it serves as the investment arm of Colina Holdings Ltd.. The firm provides diverse financial services to both individual and institutional clients. While customers continue to entrust the company with their money, senior executives are actively working to cover up a major data breach involving approximately 500 GB of highly confidential data. The leak includes, but is not limited to: 1. Client Personally Identifiable Information (PII) 2. Client Financial Profiles & Asset Data 3. Proprietary Business Intel & System Data 4. Holistic Estate & Legal Planning 5. Regulatory & Compliance Records Stay tuned for further updates.

Other Victims — INCRANSOM (8)

Quick Facts

CountryBS (BS)
SectorFinancial Services
Attack DateJun 1, 2026
Intel Sourceransomware.live

Threat Group

INCRANSOM
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.