Inc Ransom ransomware group lists seasonsfour.com on its leak site

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: July 24, 2025

The Inc Ransom group has listed the United States-based retail firm seasonsfour.com on its leak site, alleging a data breach. This development follows the group's claim of having gained unauthorized access to the organization's systems.

The alleged attack and group claims

On July 24, 2025, the threat actor known as Inc Ransom added the domain seasonsfour.com to its dedicated leak platform. The group claims to have successfully infiltrated the organization's systems and has issued a warning suggesting that stolen data may be published on their site.

While the specific details of the intrusion remain unclear, the nature of this listing points toward a strategic move by the attackers. Inc Ransom is known for employing double-extortion tactics. In such scenarios, threat actors do not merely encrypt an organization's data to disrupt operations; they also exfiltrate sensitive information to use as leverage. By threatening to release this data publicly, the group aims to exert maximum pressure on the organization to meet their demands.

Ransomware leak sites serve as a public shaming mechanism for cybercriminals. By listing a victim on these platforms, attackers attempt to damage the target's reputation and increase the likelihood of a ransom payment. The presence of a company on such a site is a significant indicator of a potential security incident that requires immediate investigation.

Details regarding the alleged leaked data

At this time, the threat actor has not provided specific details or sample files regarding the nature of the alleged leaked data. No information has been provided concerning the total size of the data or the specific number of files involved in the incident. Furthermore, there has been no mention of a specific ransom demand or a confirmed date for the initial attack, although the listing itself appeared on July 24, 2025.

Potential risks and impacts

• No specific data types have been identified in the current listing.

Because no samples have been released, the exact scope and severity of the breach cannot be determined. However, if data is eventually released, it could provide clearer insights into what was taken and the extent of the compromise.

Organization profile

Seasons Four is a family-owned business based in Lexington, Massachusetts. Established in 1970, the company is a retail store that specializes in outdoor furniture, garden plants, accessories, and decorative items.

Analysis and potential consequences

This incident may create secondary risks for the organization's customers and employees, such as identity theft or targeted phishing attacks. When sensitive information is compromised, individuals associated with the organization may become targets for further social engineering attempts or fraudulent activities.

As a United States-based entity, a potential data breach could lead to legal consequences under state-level data protection laws and regulations. Organizations must navigate complex regulatory landscapes when personal information is involved in a security incident. Additionally, the organization may face negative impacts on its operational continuity and brand reputation.

Inc Ransom has been active since mid-2023 and is recognized for its use of double-extortion methods. To mitigate such risks, organizations in the retail and e-commerce sectors often focus on strengthening their defensive posture. This typically includes implementing robust access controls, maintaining regular backups, and conducting thorough employee training to recognize phishing attempts. Monitoring for unauthorized access and ensuring compliance with regional data protection standards are also critical components of a modern cybersecurity strategy.