LGBTQ Center Orange County listed by Inc Ransom on leak site

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Government & Defense
• Announcement date: January 28, 2026

The threat actor known as Inc Ransom has published an announcement on its leak site claiming to have exfiltrated data belonging to the LGBTQ Center Orange County. According to the group's post, the organization's data has been compromised, and the attackers have expressed their intention to publish the stolen information within the coming week.

The claimed attack and threat actor activities

The Inc Ransom group has officially listed the LGBTQ Center Orange County on its dedicated leak site. In their announcement, the group claims to have successfully compromised the organization's data. To support their claims, the threat actors provided several document screenshots as evidence within the leak site post.

Ransomware groups often utilize leak sites to exert pressure on their victims through a tactic known as double extortion. In a double extortion scheme, attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive data before the encryption occurs. The threat of leaking this stolen data on a public platform serves as a secondary method of coercion to force the victim into paying a ransom. By publishing a countdown or a deadline, such as the one mentioned by Inc Ransom, the group aims to increase the psychological pressure on the target organization.

The screenshots shared by the group in their announcement appear to contain various spreadsheet and document samples. These files seem to be related to the operational processes of the organization, providing a glimpse into the internal administrative functions that may have been accessed during the intrusion.

Data involved in the claim

While the group has provided evidence through screenshots, the listing does not specify the exact volume of data or the total number of files stolen. No specific details were provided regarding the total size of the data or the specific ransom demand requested by the attackers.

• The listing names no specific data types.

About the LGBTQ Center Orange County

The LGBTQ Center Orange County is a non-profit, community-based organization that was established in 1971. It serves the LGBTQ+ community in the Orange County area of California by providing essential services, including health, social support, and advocacy services.

Potential impact and organizational risks

This claim may indicate a significant risk of exposure for the personal data of more than 20,000 individuals served by the organization. Because the organization is a US-based entity, a potential data breach of this nature could lead to serious legal consequences under HIPAA and various state-level data protection regulations. Such regulations are designed to ensure the privacy and security of sensitive personal and health-related information.

Given the double-extortion tactics employed by the Inc Ransom group, the leaked data could potentially be utilized by malicious actors for identity theft or targeted phishing attacks. In phishing attacks, stolen information is used to craft highly convincing fraudulent communications to trick individuals into revealing even more sensitive information or transferring funds.

Furthermore, the non-profit nature of the organization may place additional strain on its cybersecurity infrastructure. Non-profit entities often operate with limited resources, which can potentially increase the risk of secondary attacks if the initial breach is not fully remediated. Organizations in this sector can take several defensive steps to mitigate such risks, including implementing robust multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training for staff to recognize social engineering attempts.