Inc Ransom ransomware group lists bdac.com.au on its leak site

• Ransomware group: Inc Ransom
• Country: Australia
• Sector: Professional Services
• Announcement date: April 12, 2026

Inc Ransom claims to have accessed Bendigo and District Aboriginal Co-operative systems

The threat actor known as Inc Ransom has listed the domain bdac.com.au on its dedicated leak site. According to the group's announcement, they claim to have successfully gained access to the systems of the Bendigo and District Aboriginal Co-operative (BDAC) and subsequently obtained data belonging to the organization. This announcement was officially posted to the group's leak site on April 12, 2026.

The claim suggests that the breach occurred prior to the public announcement, with the group alleging the attack took place on March 28, 2026. While the listing is a significant development for the organization's digital security profile, it is important to note that the information is currently based on the claims made by the threat actor on their platform.

Details regarding the alleged data theft

Despite the announcement made by Inc Ransom, there is a lack of specific technical details regarding the scope of the incident. Currently, no specific details regarding the nature or content of the allegedly leaked data have been provided by the group. The listing does not specify the volume of files involved, the total size of the data, or the specific types of information that were purportedly exfiltrated from the organization's network.

The listing names no specific data types or categories of information that have been targeted or stolen.

About the Bendigo and District Aboriginal Co-operative

The Bendigo and District Aboriginal Co-operative (BDAC) is a community-controlled organization based in Australia. For over 15 years, the organization has been dedicated to providing essential services to the Aboriginal and Torres Strait Islander communities within the Bendigo region. Their operational scope is broad, focusing on community development and capacity-building projects intended to improve the well-being of the local community.

The organization provides a wide range of critical support services, including health, education, employment, and family support services. Given its long-standing presence and its role in providing essential social infrastructure, the organization serves as a vital hub for the local community's development and support needs.

Potential risks and organizational implications

The emergence of this claim highlights several significant risks associated with modern cyber extortion. Inc Ransom is known to utilize double-extortion tactics, a method where attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to threaten its public release. This tactic places immense pressure on organizations, as the threat of a data leak can cause reputational and legal damage even if systems are restored from backups.

Because the Bendigo and District Aboriginal Co-operative provides health services, a potential breach of this nature could pose serious risks to the confidentiality of patient records. The exposure of sensitive medical or personal information can lead to severe consequences for the individuals involved. Furthermore, the organization may face legal obligations under Australian privacy laws and data protection regulations following such an event. There is also the possibility that any leaked data could be utilized by malicious actors for identity theft or targeted phishing attacks against the organization or its clients.

The Inc Ransom group, which is known to have emerged in mid-2023, continues to operate with limited public information regarding its specific activities. For organizations in the professional services and health sectors, maintaining robust security postures is essential. This typically involves implementing strong access controls, continuous monitoring of network traffic, and ensuring comprehensive encryption for data both at rest and in transit to mitigate the impact of potential unauthorized access.