Airports.com.na listed on IncRansom leak site

• Ransomware group: IncRansom
• Country: Namibia
• Sector: Transportation
• Announcement date: March 19, 2026

IncRansom claims compromise of airports.com.na

The threat actor known as IncRansom has listed airports.com.na on its dedicated leak site. According to the announcement made on March 19, 2026, the group claims to have successfully compromised the organization's networks and exfiltrated data. This development follows the group's pattern of targeting various entities to exert pressure through the threat of data exposure.

The incident was officially announced on the group's leak site on March 19, 2026, which coincides with the date the group claims the attack occurred. At this stage, the listing serves as a claim by the threat actor regarding their access to the target's internal environment.

Details regarding the alleged data exfiltration

While the IncRansom group has publicly claimed responsibility for the breach, they have not provided specific technical details or evidence to support their claims. The listing does not include any screenshots or detailed information regarding the specific nature of the allegedly exfiltrated data. Furthermore, the group has not disclosed the total volume of data taken or the specific number of files involved in the incident.

The listing names no specific data types that have been compromised.

The mechanics of double extortion

The behavior exhibited by IncRansom is consistent with the double-extortion tactic commonly employed by modern ransomware groups. In a double-extortion scheme, attackers do not merely encrypt an organization's systems to disrupt operations; they also focus on stealing sensitive information before the encryption process begins. The goal is to create a secondary layer of leverage: if the organization can restore its systems from backups and refuses to pay the ransom for decryption, the attackers threaten to leak the stolen data on public forums to cause reputational and legal harm.

About the Namibia Airports Company

The target of this alleged attack, airports.com.na, is the Namibia Airports Company. This organization is a state-owned enterprise that holds the responsibility for the operation and management of airports within Namibia. Since its founding in 1999, the company has been tasked with overseeing the development of airport infrastructure and ensuring the provision of operational services across the country.

Potential risks and industry implications

This incident may present a significant risk of exposure for the organization's operational data and employee information. Because the Namibia Airports Company operates within the transportation sector, specifically managing critical infrastructure, such breaches must be evaluated for potential secondary attacks or supply chain risks. Attacks on transportation hubs can have cascading effects on logistics and regional connectivity.

The publication of data by a group like IncRansom can lead to substantial reputational damage for the organization. Additionally, depending on the nature of the data involved, legal processes might be triggered under the data protection regulations applicable in the organization's region. Information regarding the specific capabilities and history of the IncRansom group remains limited.

For organizations operating in critical infrastructure sectors, such as airport management, maintaining robust security postures is essential. This includes implementing strict access controls, continuous monitoring of network traffic to detect unauthorized exfiltration, and ensuring that all software and hardware are regularly patched. Furthermore, organizations often employ data loss prevention (DLP) tools and conduct regular incident response drills to prepare for the complexities of double-extortion scenarios.