rainbowtel.net

rainbowtel.net was compromised in a ransomware attack attributed to INCRANSOM in November 2025. The organization, operating in the Telecommunications sector in United States, was added to the group's data leak site as part of an extortion campaign.

INCRANSOM operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Rainbow Communications offers reliable high-speed internet and phone services primarily in Northeast Kansas. They cater to both residential and business clients, providing essential connectivity solutions. We downloaded 200GB of selected information (accounting, HR, customer data, as well as confidential information).