Inc Ransom claims data breach against verveba.com and www.att.com

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Technology
• Announcement date: October 15, 2026

Inc Ransom lists verveba.com and www.att.com on leak site

The ransomware group known as Inc Ransom has listed verveba.com and www.att.com on its leak portal. According to the group's announcement, they claim to have exfiltrated 2 TB of data belonging to these entities. This development was officially announced on the group's leak site on October 15, 2026, with the group claiming the attack occurred on the same day.

Details of the alleged attack

The incident involves a claim by Inc Ransom that they have successfully compromised the targeted organizations. While the specific nature of the breach has not been officially confirmed by the entities involved, the group has provided various document samples as part of their announcement to support their claims. The group is reportedly employing double extortion tactics in this instance.

Double extortion is a common strategy used by modern ransomware groups. In this method, attackers do not merely encrypt an organization's files to disrupt operations; they also steal sensitive information before the encryption process begins. The threat of leaking this stolen data publicly serves as additional leverage to pressure the victim into paying the ransom. This tactic significantly increases the pressure on organizations, as the risk shifts from mere operational downtime to potential long-term reputational damage and legal consequences stemming from the exposure of private information.

Data involved in the claim

Regarding the specific content of the alleged breach, the group has not provided details regarding the exact nature of the leaked data. Although screenshots displaying various document samples have been shared as part of the announcement, the specific categories of information remain unconfirmed. The listing names no specific data types.

About Verveba Telecom

Verveba Telecom is a telecommunications engineering and technology services provider. The company specializes in the design, deployment, optimization, and testing of complex wireless networks. Their service portfolio includes critical areas such as 5G, Open RAN, and AI-driven network transformation, providing essential support to leading telecom operators within the United States.

Potential risks and industry implications

This alleged data breach may pose significant risks to the operational continuity and data privacy of the organizations involved. Because the entity is based in the United States, a potential data breach could trigger complex legal processes under relevant state laws and federal regulations. The use of the double extortion method may increase secondary risks, such as identity theft or targeted phishing attacks, through the threat of data publication.

For organizations operating in the technology and telecommunications sectors, such incidents highlight the necessity of robust cybersecurity frameworks. Given that the Inc Ransom group has been active since mid-2023, organizations may need to review their current cybersecurity measures and initiate comprehensive forensic investigations to determine the exact nature of any affected data. Defensive strategies typically involve continuous monitoring, strict access controls, and regular incident response drills to mitigate the impact of such sophisticated threats.