Inc Ransom ransomware group lists WELLSLANDSCAPING.COM on its leak site

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: October 6, 2025

Inc Ransom claims data theft against Wells Landscaping

The ransomware group known as Inc Ransom has officially listed WELLSLANDSCAPING.COM on its dedicated leak site. According to the announcement made by the threat actors, the group claims to have successfully exfiltrated a significant amount of data belonging to the organization. This development follows a period of activity that the group claims began as early as August 19, 2025, with the formal announcement appearing on the leak site on October 6, 2025.

Inc Ransom is a known threat actor group that has been active since 2023. The group is recognized for employing double-extortion tactics during its campaigns. In a double-extortion scenario, attackers do not merely encrypt an organization's files to disrupt operations; they also steal sensitive data beforehand. The threat actors then use the threat of leaking this stolen information on public platforms to pressure the victim into paying a ransom. This method significantly increases the pressure on the target, as the risk of data exposure remains even if the organization can restore its systems from backups.

Details of the claimed exfiltration

The claims made by Inc Ransom regarding the scope of the breach involve a substantial volume of information. The group asserts that they have stolen approximately 14.2 GB of data from WELLSLANDSCAPING.COM. While the volume of the data is specified, the group has not provided specific details regarding the exact content or the specific file types that were included in the exfiltration.

Regarding the specific types of information involved, the listing names no specific data types. However, based on available evidence such as screenshots provided by the attackers, it is suggested that operational data related to the organization's commercial and residential landscaping services may be at risk. This could potentially include information essential to the company's daily business functions and client interactions.

About Wells Landscaping

Wells Landscaping is an American company that provides a variety of services including landscape design, installation, and maintenance. The firm serves both commercial and residential properties. Based in Massachusetts, the company offers onsite consultation in addition to traditional lawn and garden care services. As a provider in the retail and e-commerce sector, the organization manages various operational and client-facing processes that rely on digital information.

Potential impact and industry implications

This incident may negatively impact the organization's operational continuity and customer trust. Because the organization is a US-based entity, the breach may trigger legal processes under state-level data breach notification laws and potential privacy regulations. The use of double-extortion tactics by Inc Ransom means that the leaked data may be used for future identity theft or targeted phishing attacks against the company or its clients.

The small-scale nature of the organization suggests that cybersecurity measures may be limited, which could increase the impact of the attack. Furthermore, the potential publication of the data in the future may create secondary risks for the organization's supply chain partners. When a service provider is compromised, the data involved can sometimes create vulnerabilities for the partners who interact with them.

For organizations operating in similar sectors, maintaining robust cybersecurity defenses is critical. This includes implementing strong access controls, regular security awareness training, and comprehensive monitoring to detect unauthorized data movement. Protecting against exfiltration requires a multi-layered approach to ensure that even if a perimeter is breached, the movement of large volumes of data can be identified and stopped before significant damage occurs.