Cape Fear Country Club targeted by Inc Ransom ransomware group

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Hospitality
• Announcement date: January 13, 2026

Inc Ransom claims data breach at Cape Fear Country Club

The Inc Ransom ransomware group has published data it claims belongs to Cape Fear Country Club on its leak site. This announcement, made on the group's platform, suggests that the organization has been targeted in a cyberattack resulting in a data leak.

According to the claims made by the threat actor, the group listed Cape Fear Country Club on its leak site on January 9, 2026, announcing the publication of the institution's data. The group's post states that the institution has an annual revenue of 7.6 million dollars. Furthermore, the group claims that the full data leak was completed as of January 10, 2026. While the group has made these claims regarding the timing and completion of the leak, no specific information was provided regarding the total size of the data or the specific number of files involved.

Data samples and affected information

The information released by the group includes various types of sensitive documentation. Based on screenshots provided by the attackers, the leaked content appears to consist of several categories of personal and administrative information. The following items have been identified as part of the alleged leak:

• Membership application forms
• Member lists
• Personal photographs
• Contact information

The presence of such data types indicates that the breach involves sensitive personal identifiers and administrative records belonging to the club's membership base.

About Cape Fear Country Club

Cape Fear Country Club is a private members-only club located in North Carolina, United States. Founded in 1896, the facility provides a variety of social amenities to its members. The club features a golf course designed by Donald Ross and offers various other services, including tennis, swimming, fitness, and dining services.

Analysis and potential impact of the breach

The allegedly leaked data may increase the risk of identity theft and targeted phishing attacks for the institution's members. When personal information such as contact details and membership records are exposed, malicious actors can use this data to craft highly convincing social engineering attacks. These attacks often aim to deceive individuals into revealing even more sensitive information or performing unauthorized financial transactions.

As an institution operating in the United States, the organization may face legal processes under state-level data protection regulations and potential privacy violations. The exposure of member data often triggers various regulatory requirements regarding notification and compliance. Additionally, because Inc Ransom employs double extortion tactics, it is assessed that the group may continue to exert pressure on the institution using the obtained data. Double extortion is a common ransomware tactic where attackers not only encrypt an organization's data but also threaten to leak sensitive information on public forums to coerce the victim into paying the ransom.

For organizations in the hospitality and private club sector, such incidents highlight the importance of robust security measures. To mitigate potential secondary risks, it is significant for an institution to notify its members about the incident and conduct a thorough review of its security measures. Strengthening defensive postures through regular security audits, implementing multi-factor authentication, and enhancing employee training on phishing awareness are standard industry practices for reducing the impact of such cyber threats.