Inc Ransom ransomware group lists www.melenco.com on its leak site

• Ransomware group: Inc Ransom
• Country: United Arab Emirates
• Sector: Professional Services
• Announcement date: September 10, 2025

Inc Ransom claims to have stolen data from Melenco

The threat actor known as Inc Ransom has listed the organization Melenco on its leak site, alleging that it has successfully compromised the company's data. According to an announcement posted on September 10, 2025, the group claims to have exfiltrated a total of 226 GB of data from the target. This type of announcement is a common tactic used by ransomware groups to pressure victims into paying ransoms by demonstrating that they have access to sensitive information.

In this specific instance, the group has provided various samples of the stolen data to support their claims. These samples include a variety of operational documents and identification records. The presence of such diverse documentation suggests a broad compromise of the organization's internal files and personal records.

Details of the alleged data exfiltration

The claims made by Inc Ransom involve a significant volume of information. The group alleges that the breach resulted in the theft of 226 GB of data. While the total file count and the specific ransom demand have not been disclosed by the group, the samples provided in screenshots offer insight into the types of information that have been compromised.

The leaked data samples reportedly include highly sensitive personal and corporate information, such as:

• Identification documents
• Passports
• Family registry records
• Corporate invoice documents

The exposure of such sensitive documents, particularly those containing personal identification and family records, significantly increases the risk of identity theft and fraud for the individuals involved, including both the organization's employees and its clients.

About Melenco

Melenco is a company based in the United Arab Emirates. The organization provides technical equipment supply and professional services, with a specific focus on construction, engineering, and industrial projects. Additionally, the company offers logistics and technical support to various industrial sectors within the region.

Risks and implications of the breach

The nature of the shared personal information suggests that the organization could face legal consequences under the data protection regulations of the United Arab Emirates. Because the leaked data contains sensitive identification and family records, the impact on the privacy of employees and clients is substantial.

Given the double-extortion tactics frequently employed by the Inc Ransom group, it is possible that the leaked data could be utilized for secondary attacks or targeted phishing campaigns. In a double-extortion scenario, attackers not only encrypt the victim's systems but also threaten to release sensitive data to force payment. This tactic ensures that even if an organization can restore its systems from backups, the threat of data exposure remains a powerful lever for the attackers.

Furthermore, because Melenco operates within the professional services sector, this incident may pose risks to supply chain security. Organizations in these sectors often hold critical data that, if compromised, can impact the security and operations of their various partners and clients. While information regarding the specific capabilities and history of the Inc Ransom group remains limited, the breach highlights the ongoing risks faced by industrial and professional service providers.

To mitigate such risks, organizations typically focus on strengthening their defensive postures through various security measures. These include implementing robust access controls, maintaining regular offline backups, and conducting employee training to recognize phishing attempts. Monitoring for unauthorized data exfiltration and ensuring compliance with regional data protection laws are also critical components of a modern cybersecurity strategy.