Infonet Media d.o.o. listed on Inc Ransom leak site

• Ransomware group: Inc Ransom
• Country: Slovenia
• Sector: Technology
• Announcement date: April 3, 2026

The Inc Ransom ransomware group has officially listed the Slovenian media organization Infonet Media d.o.o. on its dedicated leak site. According to the announcement made by the threat actors, the group claims to have successfully targeted the company and obtained sensitive information belonging to the organization.

The details of the claim

The incident was brought to public attention when the Inc Ransom group published an announcement on their leak site on April 3, 2026. The group asserts that they have gained unauthorized access to the systems of Infonet Media d.o.o. and have extracted data from the victim. While the group has made this claim, the specific details regarding the exact timing of the initial intrusion are noted as April 1, 2026. The announcement includes the publication of various document samples intended to demonstrate the scope of the breach and pressure the organization.

Ransomware leak sites serve as a platform for cybercriminal groups to exert pressure on their victims through a tactic known as double extortion. In these scenarios, attackers do not merely encrypt a company's systems to disrupt operations; they also steal sensitive data and threaten to release it publicly if a ransom is not paid. This method increases the leverage held by the attackers, as the threat of data exposure can cause significant reputational and legal damage to the victimized entity.

Data types involved in the leak

Based on the screenshots and document samples provided by the Inc Ransom group, the leaked information appears to include various internal documents. These files are intended to showcase the nature of the stolen data to the public. The information identified in the group's post includes:

• Administrative documents
• Financial statements
• Personnel data

The presence of such documents suggests that the breach may have compromised sensitive corporate records and private information regarding the company's workforce. No specific information was provided by the group regarding the total size of the data stolen or the specific number of files compromised during the attack.

About Infonet Media d.o.o.

Infonet Media d.o.o. is a significant player in the Slovenian media landscape. It is recognized as one of the largest radio networks in Slovenia, maintaining a strong presence through the operation of popular stations such as Radio 1 and Radio Antena. The organization's core business activities are centered around radio broadcasting, the production of diverse content, and the execution of various advertising projects.

Impact and industry considerations

This leak claim indicates that sensitive corporate and personal data within Infonet Media d.o.o. may be at risk of exposure. Because the organization is based in Slovenia, a confirmed data breach could trigger significant legal obligations under the General Data Protection Regulation (GDPR) within the European Union. Such regulations require organizations to implement strict protections for personal data and mandate specific notification procedures in the event of a breach.

Beyond the immediate legal concerns, the exposure of this data presents secondary risks. Stolen personnel and financial data can be utilized by malicious actors for identity theft or for conducting highly targeted phishing attacks against the organization's employees and business partners. Such attacks often leverage the specific context of the leaked information to appear legitimate, thereby increasing the success rate of the social engineering attempt.

For organizations operating in the media and technology sectors, maintaining operational continuity and protecting corporate reputation are critical. The use of double-extortion tactics by groups like Inc Ransom—a group for which public information remains limited—highlights the evolving complexity of the threat landscape. To defend against such threats, organizations typically focus on robust data encryption, strict access controls, and comprehensive monitoring to detect unauthorized movement of data across their networks.