Inc Ransom claims data breach against farbank.com (flywatertravel)

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Hospitality
• Announcement date: February 17, 2026

Inc Ransom claims to have stolen 100 GB of data from farbank.com (flywatertravel)

The ransomware group known as Inc Ransom has listed farbank.com (flywatertravel) on its dedicated leak site. According to the group's announcement, they claim to have successfully breached the organization and obtained a significant amount of sensitive information. This latest development highlights the ongoing threat posed by ransomware groups that utilize public leak sites to pressure their victims.

The alleged attack and group claims

The incident was officially announced on the group's leak site on February 17, 2026. Inc Ransom alleges that they have gained unauthorized access to corporate data belonging to farbank.com (flywatertravel). To support their claims of a successful intrusion, the group has shared a portion of the data as proof of the breach. The size of the stolen data is stated to be approximately 100 GB.

Ransomware groups often employ a tactic known as double extortion. In this scenario, attackers do not just encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data before the encryption occurs. The threat of leaking this stolen information on a public platform serves as a secondary layer of pressure, forcing the victim to consider paying the ransom not just to regain access to their systems, but to prevent the public exposure of their private information.

Details of the claimed data leak

The information allegedly stolen by Inc Ransom is extensive and covers various critical aspects of the organization's operations. The group claims that the leaked content includes a wide array of confidential documents and sensitive records. According to the announcement, the following types of data are involved in the breach:

• Client data
• Financial data
• Non-disclosure agreements (NDA)
• Operational data
• Corporate documents

Beyond these categories, the group claims the leak includes business agreements, development files, and financial databases containing all transactions. To demonstrate the validity of their claim, the group provided screenshots which reportedly display samples of bank statements and corporate correspondence. The inclusion of such specific documents suggests a deep level of access to the organization's internal communications and financial management systems.

Potential impact and organizational risks

The alleged breach of farbank.com (flywatertravel) carries significant implications for the organization and its stakeholders. Given the nature of the data described, the breach could lead to secondary risks such as identity theft and targeted phishing attacks directed at the organization's clients and employees. Furthermore, the claim that financial databases have been compromised could create negative impacts across the wider supply chain and among the organization's business partners.

Because the organization is based in the United States, a confirmed breach of this magnitude could trigger state-level data protection regulations and lead to potential legal consequences. The exposure of trade secrets and the publication of sensitive corporate information can also result in substantial reputational damage, potentially undermining the trust that clients and partners place in the company.

For organizations operating in the hospitality and travel sectors, such incidents underscore the necessity of robust cybersecurity frameworks. Defensive strategies typically involve implementing multi-factor authentication, maintaining rigorous patch management protocols, and conducting regular employee training to recognize phishing attempts. Additionally, maintaining offline, immutable backups and implementing strict network segmentation can help mitigate the impact of both data exfiltration and ransomware encryption. As attackers continue to target sensitive corporate and financial information, proactive monitoring and a comprehensive incident response plan remain essential components of modern organizational defense.