Inc Ransom claims data breach against selp

• Ransomware group: Inc Ransom
• Country: France
• Sector: Professional Services
• Announcement date: December 29, 2025

Inc Ransom lists selp on leak site

The ransomware group known as Inc Ransom has officially listed the French technology company selp on its leak site. According to the announcement, the threat actors claim to have successfully infiltrated the organization's systems and exfiltrated a variety of sensitive corporate data. This development follows an alleged attack date of December 28, 2025, with the formal announcement appearing on the group's platform on December 29, 2025.

The group is currently employing a double-extortion tactic in this incident. In such scenarios, ransomware actors do not merely encrypt a victim's systems to disrupt operations; they also steal sensitive information during the initial stages of the breach. The attackers then threaten to publish the stolen data on public leak sites to pressure the victim into paying a ransom. This method significantly increases the pressure on an organization, as the threat of public exposure can cause lasting damage to reputation and legal standing.

Details of the alleged data exfiltration

The claims made by Inc Ransom suggest a wide-ranging compromise of the organization's digital assets. The group asserts that the stolen information includes a diverse array of sensitive files that could impact various facets of the business. While the group has not provided specific details regarding the total volume of data stolen or the exact number of files involved, they have shared screenshots to support their claims. These images reportedly show various spreadsheets, security procedures, and samples of contracts.

According to the group's announcement, the following types of data have been compromised:

• Confidential documents
• Client data
• NDAs
• Financial data
• Operational records
• Corporate data
• Source code

About selp

SELP is a technology company based in France that specializes in digital identity management, secure payment solutions, and card technologies. The organization provides a range of secure card issuance and digital security services, focusing its operations particularly on serving financial institutions and the retail sector.

Potential impact and industry implications

The alleged breach of selp carries significant risks that could affect the organization's operational continuity and its commercial reputation. Given the specific nature of the data claimed to be stolen, the exposure of sensitive client information could potentially lead to regulatory consequences under the General Data Protection Regulation (GDPR). Furthermore, the potential publication of proprietary source code represents a serious security risk, as it may increase the likelihood of secondary attacks targeting the organization's digital infrastructure.

The disclosure of financial data and business agreements might also result in adverse effects on the company's business partnerships and its overall market competitiveness. Additionally, the double-extortion tactics utilized by Inc Ransom can lead to secondary waves of cybercrime, such as identity theft and highly targeted phishing campaigns directed at the organization or its clients, following the release of the data.

For organizations operating within the professional services and technology sectors, especially those handling sensitive financial and identity data, maintaining robust defensive postures is critical. Common defensive strategies include implementing strict access controls, maintaining comprehensive logging and monitoring to detect unauthorized movement, and ensuring regular, offline backups. Furthermore, organizations often focus on employee training to recognize phishing attempts and implement multi-factor authentication to mitigate the risk of unauthorized access to critical systems.