Moultriesheriff.com listed on Inc Ransom leak site

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Government & Defense
• Announcement date: February 10, 2026

The threat actor group known as Inc Ransom has officially listed moultriesheriff.com on its dedicated leak site. According to the group's announcement, the breach involves a significant volume of sensitive information belonging to the organization.

The alleged attack and claims by Inc Ransom

The incident was announced on the group's leak site on February 10, 2026. The threat actor, identified as Inc Ransom, claims to have successfully infiltrated the systems of the institution and obtained a substantial amount of data. Based on the group's claims, the initial attack is said to have occurred around January 14, 2026.

Inc Ransom appears to be employing double extortion tactics in this instance. Double extortion is a common ransomware strategy where attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information. The group then threatens to publish this stolen data on their leak site if the ransom demands are not met. This method is designed to exert maximum pressure on the victim by threatening to expose confidential information to the public, thereby causing reputational and legal damage.

Details regarding the claimed data

While the group has provided some metrics regarding the scale of the breach, specific details remain limited. The listing claims that the volume of sensitive data exfiltrated from the organization's systems is 187 GB. However, the group has not provided a detailed breakdown or a specific inventory of the types of files or information contained within this data set.

The listing names no specific data types, although a screenshot associated with the claim indicates that the collected data is classified as sensitive.

Organization profile

The victim, the Moultrie Sheriff's Office, is a local government agency located in the United States. It is responsible for maintaining public safety and providing law enforcement services within Colquitt County, Georgia.

Implications and potential risks

This alleged leak carries significant risks for the institution and the community it serves. Because the target is a public safety agency, the exposure of operational data and personnel information could have serious consequences. The publication of such sensitive information could potentially lead to identity theft or make employees and citizens targets for highly specific, targeted phishing attacks.

Furthermore, the use of double extortion by Inc Ransom is clearly intended to damage the reputation of the institution. Beyond the immediate impact on the agency, such a breach may also pose an indirect risk to the institution's supply chain partners, who may rely on the security of the agency's data for their own operations.

Given that the organization is a public institution operating in the United States, this incident may trigger various legal processes under state-level data protection regulations and established security protocols. For organizations operating within the government and defense sectors, maintaining robust security postures is critical to prevent such breaches. Common defensive steps often include implementing multi-factor authentication, maintaining rigorous patch management schedules, conducting regular employee security awareness training, and ensuring offline, immutable backups are maintained to mitigate the impact of ransomware encryption.