RANSOMWARE VICTIMBUSINESS SERVICES

sanver.com.mx

sanver.com.mx
INCRANSOM📍 Mexico (MX)📅 May 4, 2026
8
same group

Attack Intelligence

sanver.com.mx was compromised in a ransomware attack attributed to INCRANSOM in May 2026. The organization, operating in the Business Services sector in Mexico, was added to the group's data leak site as part of an extortion campaign.

INCRANSOM operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Sanver Forte is a leading hardware wholesaler with over 30 years of experience in the northeastern, central, and Bajío regions of Mexico. The company offers a wide range of products and services related to hardware and construction, focusing on meeting the needs and expectations of its clients through timely deliveries and excellent customer service. Their mission is to simplify the distribution of leading brands, ensuring satisfaction and profitability for customers, collaborators, and shareholders. Sanver Forte aims to be the most comprehensive and secure provider of hardware and home preservation products, contributing to the growth of its employees and the community. Employees: 1000 Revenue: $30 Million Industry: Home Improvement & Hardware Retail Phone Number: +52 7898933030

Other Victims — INCRANSOM (8)

Quick Facts

CountryMexico (MX)
SectorBusiness Services
Attack DateMay 4, 2026
Domainsanver.com.mx
Intel Sourceransomware.live

Threat Group

INCRANSOM
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.