Skip to content
Ransomware

Inc Ransom ransomware group lists www.pucobre.cl on its leak site

The Inc Ransom group has made a data leak claim against www.pucobre.cl.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: Inc Ransom
  • Country: Chile
  • Sector: Energy & Utilities
  • Announcement date: February 2, 2026

Inc Ransom claims data leak against pucobre.cl

The threat actor known as Inc Ransom has listed the organization www.pucobre.cl on its dedicated leak site. This announcement, made on February 2, 2026, constitutes a claim of a data leak against the entity. The threat actor asserts that the acquisition of data belonging to the organization occurred on the same day the announcement was posted.

Details of the alleged attack

According to the announcement made by the threat actor, the incident involves the targeting of pucobre.cl. The claim suggests that the group successfully acquired data from the organization on February 2, 2026. This type of activity is a hallmark of modern ransomware operations, where attackers move beyond simple encryption to focus on the theft of sensitive information to increase their leverage over the victim.

Inc Ransom is a ransomware group that emerged in mid-2023. The group is known for employing double extortion tactics, a method where attackers not only encrypt an organization's systems but also steal sensitive data to threaten its public release if a ransom is not paid. This approach places significant pressure on organizations by threatening their reputation and legal standing.

Information regarding the leaked data

At this stage, the listing provides very limited information regarding the specific content of the alleged breach. No information regarding the nature of the alleged leaked data has been provided by the threat actor. Furthermore, no screenshots have been made available to verify the contents of the stolen information. The listing does not specify the volume of data or the number of files involved.

  • No data types were specifically named in the listing.

Organizational profile and sector context

The target of this alleged attack, pucobre.cl, is an organization based in Chile. Based on the information provided in the claim, the organization focuses its operations on mining activities and the production of copper. This placement within the energy and utilities sector highlights the ongoing targeting of critical industrial and resource-based organizations by cybercriminal groups.

Analysis and potential risks

This incident indicates that the Inc Ransom group is threatening to expose corporate data using double extortion tactics. Given the group's past activities, it is possible that the leaked data could be used for secondary attacks. When an organization is targeted by such tactics, the risks extend beyond immediate operational disruption.

Until the content of the data is clarified, risks such as identity theft and targeted phishing against the organization's employees or customers should not be ignored. Attackers often use stolen credentials or personal information to launch more sophisticated social engineering campaigns. Additionally, within the framework of data protection regulations in Chile, the organization may face legal notification obligations in the event of a potential data breach.

In such scenarios, organizations typically focus on several defensive and responsive measures. These include conducting thorough forensic investigations to determine the scope of the breach, implementing enhanced monitoring to detect further unauthorized access, and preparing communication strategies for stakeholders and regulatory bodies. For organizations in the mining and utilities sectors, maintaining robust data protection protocols is essential to mitigate the impact of potential leaks and secondary exploitation attempts.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

Related stories