Skip to content
Ransomware

Inc Ransom ransomware group lists https://eclmn.com/ on its leak site

Minnesota-based healthcare and residential care provider eclmn.com has been listed on the leak site of the Inc Ransom group.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: Inc Ransom
  • Country: United States
  • Sector: Healthcare
  • Announcement date: July 28, 2026

Inc Ransom claims attack on eclmn.com

The Inc Ransom ransomware group has published an announcement on its leak site claiming that it has targeted eclmn.com, a healthcare and residential care provider based in the United States. According to the group's post, the organization was the victim of a cyberattack. The announcement was made on July 28, 2026, and the group alleges that they have successfully obtained data belonging to the organization.

Ransomware groups often utilize leak sites to pressure victims into paying ransoms. These sites serve as a public platform where threat actors post information about their targets, often including names of organizations and, in some cases, samples of stolen data. By listing a victim, the group aims to increase the visibility of the breach to cause reputational damage and force a response from the affected entity.

Details of the claimed breach

While the Inc Ransom group has officially claimed responsibility for the attack against eclmn.com, the announcement remains notably sparse regarding the specifics of the incident. The group has not provided any information regarding a specific ransom demand, nor have they disclosed the volume of the compromised data or the total number of files involved in the breach.

Furthermore, there is no information or screenshot available regarding the nature of the compromised data. The listing does not name any specific data types that have been allegedly exfiltrated from the organization's systems.

About eclmn.com

Eclmn.com is a family-run health and residential care organization located in Minnesota. The organization provides specialized services including adapted housing, professional in-home support, and various daily living solutions. Their services are specifically designed to assist adults with physical disabilities and those facing limited mobility.

Potential impact and industry implications

The targeting of an organization within the healthcare sector carries significant implications. Because eclmn.com operates in this industry, a potential data breach could pose serious risks to the confidentiality of patient records. In the United States, such incidents often lead to complex legal sanctions and rigorous compliance processes under HIPAA regulations. The exposure of sensitive information can trigger secondary risks for the individuals involved, such as identity theft or the occurrence of targeted phishing attacks directed at patients and employees.

The Inc Ransom group is known for employing double-extortion tactics. In a double-extortion scheme, attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to threaten its public release. This method is designed to maximize leverage over the victim, as the threat of data exposure can be more damaging than the loss of access to systems alone. Consequently, such attacks can negatively impact the operational continuity of the targeted organization.

For smaller or family-run entities, the impact of such incidents may be exacerbated. Deficiencies in data security protocols can lead to more severe consequences when an organization lacks the extensive cybersecurity infrastructure often found in larger corporations. To defend against these threats, organizations in the healthcare sector typically focus on strengthening access controls, implementing robust encryption for data at rest and in transit, and maintaining comprehensive employee training to recognize social engineering attempts. Regular security audits and adherence to regulatory frameworks are also essential components of a modern defensive posture against ransomware groups.

From the Essential plan

Infostealer Detection

See your firm's attack surface on one screen: how many findings, at which severity, on which domain.

Related stories