RANSOMWARE VICTIMGOVERNMENTDUPLICATE CLAIM

cityofsignalhill.org

cityofsignalhill.org
INCRANSOM📍 United States (US)📅 December 13, 2025
8
same group

Attack Intelligence

cityofsignalhill.org was compromised in a ransomware attack attributed to INCRANSOM in December 2025. The organization, operating in the Government sector in United States, was added to the group's data leak site as part of an extortion campaign.

INCRANSOM operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Signal Hill, CA offers a range of services and resources to its residents, including city hall renovation updates, a shop local campaign called Open Rewards, and information on upcoming city events. The city also provides resources for job seekers, safe clean water initiatives, and community assistance programs. Residents can access the city's cable channel online, nominate pets for Pet of the Month, and download the Signal Hill Now mobile app for convenient access to city information. Employees: 50 Revenue: $7.1 Million Industry: Government Phone Number: (562) 989-7300

Additional Details

Other Victims — INCRANSOM (8)

Quick Facts

CountryUnited States (US)
SectorGovernment
Attack DateDec 13, 2025
Domaincityofsignalhill.org
Intel Sourceransomware.live
StatusDUPLICATE CLAIM

Threat Group

INCRANSOM
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.