ChokChey Finance
Attack Intelligence
ChokChey Finance was compromised in a ransomware attack attributed to INCRANSOM in February 2026. The organization, operating in the Financial Services sector in KH, was added to the group's data leak site as part of an extortion campaign.
INCRANSOM operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
ChokChey Finance PLC is a microfinance institution based in Cambodia, established in 2015 and licensed by the National Bank of Cambodia in 2016. The company offers a variety of financial products including speed loans, agriculture loans, SME loans, and mobile device loans, targeting low to moderate income families