RANSOMWARE VICTIMMANUFACTURINGDUPLICATE CLAIM

naffco.com

naffco.com
INCRANSOM📍 UAE (AE)📅 November 19, 2025
8
same group

Attack Intelligence

naffco.com was compromised in a ransomware attack attributed to INCRANSOM in November 2025. The organization, operating in the Manufacturing sector in UAE, was added to the group's data leak site as part of an extortion campaign.

INCRANSOM operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

NAFFCO is an international manufacturer and supplier of firefighting, security, and safety products. They also offer training services and emergency responder certification. The company is headquartered in Dubai, in the United Arab Emirates. With a global network spanning over 100 countries, NAFFCO has been recognized as the unparalleled leader in fire safety. The official website of NAFFCO says:" Our success is driven by our "passion to protect"" We do not know for certain how well they protect their clients, but they could not protect themselves. We have 1TB of data at our disposal (fiscal data, internal mail, HR data, budgets, strategic development plans and much more)

Additional Details

Other Victims — INCRANSOM (8)

Quick Facts

CountryUAE (AE)
SectorManufacturing
Attack DateNov 19, 2025
Domainnaffco.com
Intel Sourceransomware.live
StatusDUPLICATE CLAIM

Threat Group

INCRANSOM
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.