Inc Ransom ransomware group lists www.precipiodx.com on its leak site

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Healthcare
• Announcement date: December 2, 2025

Inc Ransom claims data breach at Precipio DX

The threat actor known as Inc Ransom has listed the healthcare entity www.precipiodx.com on its leak site. According to the group's announcement, they claim to have successfully exfiltrated a significant volume of data belonging to the organization. This development marks a new instance of targeted pressure against a company operating within the sensitive healthcare technology sector.

The group's announcement, which appeared on December 2, 2025, serves as a public claim of a successful intrusion. While the organization has not provided a statement regarding the incident, the threat actor has taken to its dedicated leak site to broadcast the breach to a wider audience. This method is a hallmark of modern ransomware operations, where the threat of public exposure is used as a primary lever for negotiation.

Details of the claimed exfiltration

According to the claims made by Inc Ransom, the total size of the allegedly exfiltrated data is 150 GB. To support their claims of a successful breach, the group has shared several document samples. These samples, as observed in the screenshots provided by the attackers, appear to be related to the organization's operational processes and business activities.

The content of the shared samples suggests that the stolen information includes various types of sensitive documentation. The specific types of data mentioned in the listing include:

• Medical reports
• Corporate operational documents

The presence of these document types in the leak site announcement indicates that the attackers are targeting both clinical and administrative information. Such a mix of data types is common in breaches involving healthcare providers, as it allows attackers to leverage both medical privacy concerns and corporate operational secrets.

About Precipio DX

Precipio is a healthcare technology company that specializes in cancer diagnostics and pathology services. The organization provides precision medicine solutions to physicians and patients through a variety of laboratory testing and diagnostic services. Because of its role in providing critical diagnostic information, the company operates in a highly regulated environment where data integrity and privacy are paramount.

Analysis and implications of the incident

This incident presents a significant risk of exposing sensitive data from an organization operating in the healthcare sector. The use of a double-extortion strategy is evident here; Inc Ransom is likely attempting to pressure the organization by threatening to publish the stolen data. In a double-extortion scenario, attackers first steal sensitive information and then demand a ransom to prevent its release, rather than just encrypting the victim's systems.

If the leaked data includes patient records, legal and administrative processes under HIPAA regulations in the United States may be triggered. The potential exposure of medical reports and corporate documents can lead to various secondary risks, such as identity theft or targeted phishing attacks aimed at employees and patients. These secondary attacks often follow a breach, as the stolen information provides attackers with the necessary context to craft highly convincing fraudulent communications.

Inc Ransom is a ransomware group that emerged in mid-2023 and is known for practicing this double-extortion method. For organizations in the healthcare sector, such incidents underscore the necessity of robust data protection frameworks. Defensive measures typically include implementing strict access controls, maintaining comprehensive audit logs, and ensuring that all sensitive data is encrypted both at rest and in transit. Furthermore, regular monitoring of network traffic and employee awareness training are essential components of a modern cybersecurity posture to mitigate the risk of such high-impact data exfiltration events.