Skip to content
Ransomware

Inc Ransom ransomware group lists https://www.fulcrumre.com/ on its leak site

The Inc Ransom group claims to have leaked 2TB of data allegedly belonging to fulcrumre.com on their leak site.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: Inc Ransom
  • Country: United States
  • Sector: Professional Services
  • Announcement date: April 29, 2026

The ransomware group known as Inc Ransom has listed the domain fulcrumre.com on its leak site, claiming to have compromised the organization's data. According to the announcement made on April 29, 2026, the group alleges that they have successfully exfiltrated a massive volume of information belonging to the company.

The alleged attack and group tactics

The incident, which the group claims began around April 11, 2026, involves a significant breach of the target's digital environment. Inc Ransom has asserted that the volume of data stolen reaches approximately 2TB. The group's announcement suggests that this dataset may encompass the entirety of the company's data. By publishing the victim's name on their leak site, the group is employing a strategy known as double extortion. In this tactic, attackers not only encrypt an organization's systems to disrupt operations but also threaten to release sensitive information to the public to pressure the victim into paying a ransom.

Ransomware leak sites serve as a public gallery for cybercriminals to shame their victims. These platforms are used to demonstrate the success of an intrusion and to increase the psychological pressure on the targeted organization. By showcasing samples of stolen files, threat actors aim to prove the validity of their claims and maximize the potential for extortion.

Details of the claimed data leak

The information provided by the threat actor includes visual evidence of the breach. Screenshots provided in the announcement display various types of sensitive business documentation. These include, but are not limited to, estimate forms and various files that appear to be contract-like in nature. The group maintains that the total amount of compromised data is 2TB.

The specific types of data allegedly affected include:

  • Company data
  • Contracts
  • Business documents

While the group claims a large volume of data has been taken, no specific information was provided regarding a ransom demand. The exact number of files contained within the 2TB dataset has also not been disclosed by the attackers.

About Fulcrum Real Estate

Fulcrum Real Estate is an American company focused on commercial real estate investments, asset management, and development projects. The company specializes in identifying and managing strategic real estate opportunities within the professional services sector.

Potential impact and organizational risks

This alleged data leak may pose significant risks to the organization's operational continuity and commercial reputation. If the compromised data includes sensitive business processes or customer information, the organization may face legal obligations under US state laws and relevant data protection regulations. Such incidents often necessitate a thorough forensic investigation to determine the full scope of the leak and to identify the specific entry points used by the attackers.

The use of double-extortion tactics by Inc Ransom may increase secondary risks following the publication of the data. These risks include identity theft and the execution of targeted phishing attacks against the organization's clients, partners, or employees. When sensitive business documents and contracts are leaked, the information can be used to craft highly convincing social engineering campaigns.

For organizations operating in the professional services sector, maintaining robust cybersecurity posture is essential. Common defensive steps include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training for employees to recognize phishing attempts. Additionally, organizations often need to notify relevant stakeholders and regulatory bodies if a breach involving sensitive information is confirmed.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

Related stories