Inc Ransom ransomware group lists http://ramet-trom.co.il/ on its leak site

• Ransomware group: Inc Ransom
• Country: Israel
• Sector: Manufacturing
• Announcement date: March 1, 2026

Inc Ransom claims data breach at Ramet-Trom

The Inc Ransom ransomware group has listed the Israeli manufacturing company Ramet-Trom on its dedicated leak site. According to the announcement posted on March 1, 2026, the threat actor group claims to have compromised a significant amount of data belonging to the organization. The group asserts that the attack occurred on February 28, 2026, marking a rapid escalation from the initial intrusion to the public listing.

Ransomware leak sites serve as a platform for cybercriminals to exert pressure on victims through public shaming. In many modern cyberattacks, threat actors employ a tactic known as double extortion. This method involves not only encrypting a victim's internal systems to disrupt operations but also exfiltrating sensitive information. By threatening to release this stolen data on a public forum, attackers aim to increase the pressure on the organization to pay the ransom, leveraging the threat of reputational damage and regulatory scrutiny.

Details of the alleged data theft

The Inc Ransom group has made specific claims regarding the volume of information they have allegedly acquired during the breach. The group claims that approximately 1 terabyte of data has been compromised. While the total file count and the specific ransom demand have not been disclosed by the group, the scale of the alleged theft suggests a substantial impact on the organization's digital assets.

Based on screenshots shared by the attackers in their announcement, the compromised information appears to include several categories of sensitive corporate and technical information. The data identified in the leak includes:

• Technical blueprints
• Contracts
• Corporate documents

The exposure of such documentation can be highly damaging to an organization's competitive standing and operational integrity.

About Ramet-Trom

Ramet-Trom is an Israel-based construction and manufacturing company. The organization specializes in the production of reinforced concrete structures and precast concrete elements. Their industrial capabilities allow them to provide specialized concrete solutions for various infrastructure projects and industrial buildings.

Risk assessment and industry implications

Given the nature of the data allegedly stolen, there is a significant risk that the information could be publicly released or sold on illicit forums. For a company operating within the manufacturing sector, such a breach carries specific risks, including the potential infringement of intellectual property rights and the exposure of critical trade secrets. The loss of technical blueprints and proprietary manufacturing processes can undermine a company's unique market position.

Furthermore, because the entity is based in Israel, this incident may trigger legal processes under relevant local data protection regulations. Beyond the immediate corporate impact, the leaked information could be utilized by malicious actors for identity theft or to conduct targeted phishing attacks against the company's employees or business partners. Such social engineering attacks often follow a data breach, using the stolen context to appear more legitimate.

The Inc Ransom group has been active since mid-2023, and incidents like this highlight the ongoing threat to industrial and manufacturing entities. To mitigate these risks, organizations in this sector often focus on strengthening their operational security and implementing robust data protection frameworks. Defensive measures typically include maintaining offline backups, implementing strict access controls to sensitive technical documentation, and conducting regular security awareness training to defend against the phishing attempts that often follow such leaks.