BELFOR

BELFOR was compromised in a ransomware attack attributed to INCRANSOM in April 2026. The organization, operating in the Business Services sector in Singapore, was added to the group's data leak site as part of an extortion campaign.

INCRANSOM operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

BELFOR (Asia) Pte Ltd, Singapore. RecoveryPro Ltd, Japan. Country list: Singapore, Japan, Korea, Taiwan, Thailand, Malaysia. Total Data: 430GB Data: Confidential (Classified) - non-disclosure agreements (NDA's), Personal scan passports, Employee Privacy, Employment contracts, Employment Records, Health Information. Finance Department - Salary & Bonus structures, Internal audit reports, Insurance contracts & payments, Payroll Reports, Benefits & pension details, Internal investigations, Partners agreements, Balance sheets, Budget reports, Credit agreements, Tax filings, Marketing plans. IT Department - IT network infrastructure, Research and development data, SDLC documentation. Other - All projects report & files, Buildings drawings, Object Photo, Photo of damages, Object plans, a lot of internal documentation. Clients: Mitsubishi, Samsung, Toyota, Kawasaki Motors, Sony Technology, Fujifilm Business Innovation, Siemens, Seiko, Nissan and many other. Full data release coming soon!!!