Inc Ransom ransomware group lists evergreenpnw.com on its leak site
The Inc Ransom group has listed evergreenpnw.com on its leak site, claiming to have compromised the organization's data.
- Published
- 2 min read
- 2 min read
- Ransomware group: Inc Ransom
- Country: United States
- Sector: Agriculture and Food Production
- Announcement date: February 22, 2025
Inc Ransom claims data breach at evergreenpnw.com
The threat actor known as Inc Ransom has listed evergreenpnw.com on its dedicated leak site. The group claims to have successfully compromised the organization's data, marking a new entry on their platform of victims.
Details of the alleged attack
According to the announcement published on February 22, 2025, the Inc Ransom group alleges that the organization was compromised on January 22, 2025. This indicates that the threat actors may have maintained access to the network for approximately one month prior to the public listing on their leak site.
The group's claim involves a significant volume of data. Based on the information provided by the threat actor, the breach involves the following metrics:
- Total data size: 32.5 GB
- Total file count: 63,846 files
No specific details regarding the exact content or nature of the leaked data have been provided by the group; however, the listed files may contain operational data belonging to the organization.
About Evergreen Christian Community
Evergreen Christian Community is a religious organization based in Olympia, Washington. It operates as a church and community-focused organization providing religious services.
Analysis and potential impact
Considering the double-extortion tactics commonly employed by the Inc Ransom group, the publication of the alleged stolen data may lead to operational and reputational damage for the organization. Double extortion is a strategy where attackers not only encrypt an organization's systems but also steal sensitive data, threatening to release it publicly to pressure the victim into paying a ransom.
As the organization operates in the United States, potential data breaches may trigger legal processes under state-level privacy laws and federal regulations. If employee or member data is included in the 63,846 files, these individuals may face risks of identity theft or targeted phishing attacks.
The group's past activities suggest that the data may be made public if the ransom is not paid. For organizations in the agriculture and food production sector or those serving specific communities, maintaining robust cybersecurity postures is essential. Common defensive steps for organizations include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training to mitigate the risk of initial access through phishing or other common vectors.