Inc Ransom ransomware group lists formpipe.com on its leak site

• Ransomware group: Inc Ransom
• Country: Sweden
• Sector: Technology
• Announcement date: November 27, 2024

Inc Ransom claims to have stolen data from Formpipe

The threat actor known as Inc Ransom has listed the Swedish technology organization Formpipe on its dedicated leak site. According to an announcement published by the group on November 27, 2024, the attackers claim to have successfully compromised the organization's data. The group alleges that they have exfiltrated a significant volume of information, specifically claiming to hold 600 GB of company data. This claim follows an alleged attack date of October 13, 2024.

In their public announcement, the group has issued a threat to publish all the stolen data in the near future. This type of behavior is characteristic of modern ransomware operations, where the threat actor uses the pressure of imminent data exposure to coerce the victim. While the group has made these claims, the actual contents and the validity of the breach remain subject to verification.

Details of the alleged data breach

The announcement provided by Inc Ransom included several screenshots intended to prove the validity of their claims. These visual samples suggest that the stolen information is diverse and covers various sensitive areas of the company's operations. Based on the provided evidence, the leaked material appears to include identity cards, financial statements, business process reports, and various corporate file directories.

The specific types of information identified in the listing include:

• Identity information
• Financial documents
• Corporate business reports

The presence of such varied documentation suggests that the breach may impact multiple departments within the organization, ranging from human resources and finance to general operations.

About Formpipe

Formpipe is a Swedish software company that specializes in providing enterprise content management and digital transformation solutions. The company focuses on delivering specialized services in data management, archiving, and business process automation. Their solutions are designed to serve a wide range of clients across both the public and private sectors, making them a significant player in the digital infrastructure landscape of their region.

Analysis and potential risks

This alleged data breach may pose significant risks to the organization's operational continuity and data privacy. Because Formpipe is based in Sweden, the leaked data may fall under the scope of the European Union's General Data Protection Regulation (GDPR), which imposes strict requirements on how personal data is handled and how breaches are reported.

Considering the double-extortion tactics typically employed by the Inc Ransom group, the potential publication of this data could lead to secondary risks. These risks include identity theft or targeted phishing attacks directed at the organization's employees and customers. In such scenarios, attackers use stolen sensitive information to gain further access or to conduct social engineering campaigns.

When organizations face such threats, they may need to fulfill their legal data breach notification obligations and implement necessary security measures for the affected parties. General defensive strategies for organizations in the technology sector often involve strengthening access controls, implementing robust encryption for data at rest and in transit, and maintaining comprehensive monitoring to detect unauthorized data exfiltration early in the attack lifecycle.