Inc Ransom ransomware group lists https://www.tongapower.to/ on its leak site

• Ransomware group: Inc Ransom
• Country: Tonga
• Sector: Energy & Utilities
• Announcement date: October 9, 2025

Inc Ransom claims to have compromised Tonga Power data

The ransomware group known as Inc Ransom has listed Tonga Power Limited on its dedicated leak site. According to an announcement published by the group on October 9, 2025, the threat actors claim to have successfully compromised data belonging to the organization. This claim was made public through the group's own leak portal, marking a significant development in the ongoing threat landscape facing critical infrastructure providers.

The group's announcement suggests that the initial compromise occurred prior to the public listing. While the exact timeline of the infiltration remains a matter of the group's claim, the incident highlights the persistent targeting of essential services by sophisticated ransomware collectives. The listing serves as a public notification from the attackers, a common tactic used to exert pressure on victims during extortion attempts.

Details of the alleged data theft

Regarding the specifics of the breach, the Inc Ransom group has provided limited information concerning the contents of the stolen material. The group claims to be in possession of a substantial volume of data, which they state is approximately 87 GB in size. This volume of information suggests a significant breach of the organization's digital environment.

Despite the large size of the claimed data, the group has not provided specific details regarding the nature of the allegedly leaked files. The listing names no specific data types or categories of information that have been compromised. Furthermore, no information has been provided regarding the total file count or the specific ransom demand being sought by the attackers.

About Tonga Power Limited

Tonga Power Limited (TPL) is a state-owned enterprise that plays a vital role in the nation's infrastructure. The company is responsible for the generation, distribution, and sale of electricity throughout Tonga. Established in 2008, the organization operates with the primary mission of meeting the energy needs of the nation. TPL works to increase access to modern energy services in an environmentally sustainable manner, making it a cornerstone of the country's utility sector.

Potential impacts and industry implications

The claims made by Inc Ransom pose a potential risk to the operational processes and customer information of Tonga Power. Because the organization provides critical infrastructure services, any data breach in this sector can have far-reaching consequences. Such incidents may negatively impact service continuity and can lead to a loss of public trust in essential utility providers.

The methodology employed by groups like Inc Ransom often involves double extortion. In this scenario, attackers do not just encrypt systems but also steal sensitive data to use as leverage. The stolen data may be published on leak sites in the future to increase pressure on the organization to pay a ransom. This tactic forces organizations to choose between paying a criminal entity or facing the public exposure of their internal information.

For organizations operating within the energy and utilities sector, these types of threats underscore the necessity of robust security postures. Common defensive strategies often include the implementation of rigorous data security protocols, continuous monitoring of networks for anomalous activity, and the enforcement of strict access controls. Maintaining vigilance against potential secondary risks, such as the subsequent use of leaked data for further extortion or social engineering, is essential for maintaining long-term resilience in the face of evolving cyber threats.