Inc Ransom ransomware group lists https://geleximco.vn/ on its leak site

• Ransomware group: Inc Ransom
• Country: Vietnam
• Sector: Manufacturing
• Announcement date: August 4, 2026

Inc Ransom claims a major data breach against Geleximco

The threat actor known as Inc Ransom has officially listed the Vietnamese organization Geleximco on its leak platform. According to the group's announcement made on August 4, 2026, the attackers claim to have successfully exfiltrated a significant amount of data from the organization's systems.

This development follows a growing trend in the cyber threat landscape where ransomware groups move beyond simple encryption to more aggressive tactics. By listing a victim on a public leak site, these groups aim to maximize the pressure placed on the target organization to meet their demands.

Details of the alleged attack

The incident was announced on August 4, 2026, with the group claiming that the total volume of data obtained from Geleximco's systems amounts to 200 GB. While the group has publicized the size of the theft, they have not provided any specific details regarding the actual content of the allegedly leaked data.

The listing appears to be a classic example of double extortion tactics. In a double extortion scenario, threat actors do not merely encrypt an organization's files to disrupt operations; they also steal sensitive information beforehand. The threat of releasing this stolen data publicly serves as a secondary layer of leverage, forcing the victim to consider the consequences of a data leak alongside the operational downtime caused by encryption.

Data involved in the claim

The listing names no specific data types, providing only the stated size of 200 GB.

About Geleximco

Geleximco is a prominent Vietnam-based conglomerate that maintains a diverse portfolio of business interests. The group operates across several critical sectors, including real estate, energy, finance, and industrial manufacturing. Since its founding in 1993, Geleximco has established itself as one of the leading private sector organizations within Vietnam.

Potential risks and industry implications

The use of double extortion by Inc Ransom carries significant risks for the targeted organization. There is a high potential for sensitive corporate data to be made public or sold to various third parties on the dark web. For a conglomerate with extensive operations in the manufacturing sector, such a breach may lead to the compromise of intellectual property and highly sensitive trade secrets.

Furthermore, the incident presents several secondary risks. If the leaked data contains information related to employees or customers, it could facilitate identity theft and targeted phishing attacks against those individuals. Additionally, as a Vietnam-based entity, the organization may face complex challenges regarding compliance with local data protection regulations following such a breach.

Given that the Inc Ransom group has been active since 2023, such incidents can result in long-term negative impacts on corporate reputation. To mitigate these risks, organizations in the manufacturing and industrial sectors typically focus on robust defensive measures. These include implementing strict access controls, maintaining comprehensive offline backups, and conducting regular security awareness training to defend against the phishing attempts that often follow a data leak.