Core Supply listed on Inc Ransom leak site

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Professional Services
• Announcement date: February 10, 2026

Inc Ransom claims breach of Core Supply

The ransomware group known as Inc Ransom has officially listed the professional services organization Core Supply on its dedicated leak site. According to the announcement made on February 10, 2026, the threat actors claim to have successfully gained unauthorized access to the organization's internal systems. This development suggests that the operational data of the company may have been compromised during the attack.

The group's announcement serves as a public notification of the alleged breach. In such cyberattack scenarios, ransomware groups often use these platforms to exert maximum pressure on their targets. By publishing evidence of the intrusion, the attackers aim to demonstrate the validity of their claims and increase the psychological and reputational pressure on the victimized entity.

Details of the alleged data leak

The Inc Ransom group has shared various images that they claim contain sensitive information belonging to Core Supply. These visual samples are intended to prove the extent of the breach and the nature of the stolen information. The documents identified in the screenshots appear to be highly technical and administrative in nature, covering various aspects of the company's professional operations.

The specific types of data mentioned in the leak include:

• Technical drawings
• Project documents
• Corporate forms

The presence of such documents, which include technical projects, architectural drawings, project manuals, and corporate forms, indicates a potential compromise of the organization's intellectual property and administrative workflows. While the exact volume of the data or the total number of files stolen have not been specified by the group, the nature of the shared samples points toward a significant breach of operational data.

About Core Supply

Core Supply is a professional services company that has been operating since 2010. The organization is characterized by an aggressive business approach and maintains active partnerships with its customers and suppliers. Based in the United States, the company plays a role in the professional services sector, managing complex projects that involve various stakeholders and technical requirements.

Analysis and potential implications

Given the double-extortion tactics frequently employed by the Inc Ransom group, it is assessed that the leaked data may compromise the organization's trade secrets and operational processes. Double extortion is a common ransomware strategy where attackers not only encrypt a victim's data but also steal sensitive information, threatening to release it publicly unless a ransom is paid. This method is designed to ensure that even if an organization can restore its systems from backups, the threat of a data leak remains a powerful tool for the attackers.

Because Core Supply is based in the United States, the potential data breaches may lead to legal consequences under state-level data protection laws and sectoral regulations. The sensitivity of the shared documents, such as architectural drawings and project manuals, could create secondary risks for the organization's supply chain partners and customers. If proprietary technical information is exposed, it may impact the competitive standing of both the organization and its partners.

Furthermore, the possibility of this data being used in targeted phishing attacks should not be overlooked. When attackers obtain corporate forms and project details, they can craft highly convincing and personalized messages to deceive employees or clients. The group's past activities indicate that they aim to exert pressure on the organization by making the leaked data publicly available to maximize the impact of the breach.

Organizations operating in the professional services sector should remain vigilant against such threats. Common defensive steps include implementing robust access controls, maintaining regular offline backups, and conducting thorough employee training to recognize phishing attempts. Monitoring for unauthorized access and ensuring compliance with regional data protection regulations are also critical components of a modern cybersecurity posture.