Inc Ransom ransomware group lists bennett.edu on its leak site

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Education
• Announcement date: December 6, 2025

Inc Ransom claims to have compromised Bennett College

The Inc Ransom ransomware group has published an announcement on its dedicated leak site, claiming that it has successfully targeted Bennett College. According to the post published on December 6, 2025, the threat actor group alleges that they have gained unauthorized access to the institution's network and have exfiltrated sensitive data from its systems.

The claim suggests that the breach occurred around December 5, 2025. The group utilized its own leak platform to make this announcement public, asserting that they have compromised the systems of the educational institution. This type of public listing is a common tactic used by ransomware groups to exert pressure on their targets.

Details regarding the alleged data exfiltration

While the Inc Ransom group has officially listed Bennett College on its platform, specific details regarding the nature of the alleged leaked data have not been provided. The group has not released any screenshots or specific descriptions that would clarify the exact contents of the files they claim to have stolen.

The listing names no specific data types or files involved in the alleged breach.

About Bennett College

Bennett College is a private liberal arts college located in North Carolina, United States. The institution is dedicated to empowering women through education and is recognized for its innovative academic models that provide personalized support to its students.

Risk assessment and implications for the education sector

The situation involving Bennett College highlights the ongoing risks faced by educational institutions. Given that the Inc Ransom group typically employs double-extortion tactics, there is a significant risk that the institution's sensitive data could be published on the dark web. In a double-extortion scenario, attackers not only encrypt the victim's data but also steal it, threatening to leak it publicly unless a ransom is paid.

For an educational institution, the potential exposure of student and employee records could lead to various secondary risks. These include identity theft and the facilitation of targeted phishing attacks against the individuals involved. Such attacks often use stolen personal information to appear legitimate, making it harder for users to detect fraudulent communications.

Furthermore, because the institution is based in the United States, any potential data breach may trigger specific legal obligations. These obligations are governed by various state laws and federal regulations designed to protect consumer and student privacy. The group's past activities suggest a strong tendency to leak data as a primary means to pressure victims into paying a ransom.

To defend against such threats, organizations in this sector often focus on strengthening their cybersecurity posture through several defensive steps. This includes implementing robust network monitoring to detect unauthorized access, enforcing multi-factor authentication to protect sensitive accounts, and maintaining regular, offline backups to mitigate the impact of encryption. Additionally, regular security awareness training can help staff recognize the phishing attempts that often follow a data leak. As ransomware groups continue to target high-value sectors like education, maintaining a proactive defense and a clear incident response plan remains critical for institutional stability.