Naples Heritage Golf & Country Club targeted by Inc Ransom

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Hospitality
• Announcement date: March 6, 2025

Inc Ransom claims data breach at Naples Heritage Golf & Country Club

The ransomware group known as Inc Ransom has officially listed the Naples Heritage Golf & Country Club on its dedicated leak site. According to the announcement made on March 6, 2025, the threat actors claim to have successfully breached the organization's digital networks. The group alleges that they have exfiltrated sensitive information from the club's systems, marking a significant security incident for the hospitality-focused organization.

This type of announcement is a common tactic used by modern ransomware operators. In these scenarios, the threat actors often employ a method known as double extortion. This strategy involves not only encrypting an organization's data to disrupt its operations but also stealing sensitive information to use as leverage. By threatening to release stolen data on public leak sites, attackers aim to pressure the victim into paying a ransom to prevent the exposure of confidential records, thereby targeting both the organization's operational continuity and its public reputation.

Details of the alleged intrusion

The claim made by Inc Ransom suggests a targeted intrusion into the digital infrastructure of the club. The group asserts that they gained unauthorized access to the organization's internal networks, allowing them to move through the system and identify high-value assets. Following the breach, the group published various document samples on their leak site to substantiate their claims of theft.

These samples are intended to demonstrate the successful exfiltration of data. According to the group's announcement, the stolen information includes a variety of operational and membership-related records. The presence of these samples on a leak site is a hallmark of ransomware groups seeking to maximize the impact of their extortion attempts by proving they possess actual, sensitive files belonging to the target.

Data types identified in the leak

Based on the screenshots and samples shared by the threat actor, the following types of data have been identified as potentially compromised:

• Bank statements
• Member contact information
• Medical status notes
• Financial documents

The inclusion of such diverse data types suggests that the attackers may have had access to multiple departments or databases within the organization's network, ranging from administrative and financial systems to those containing sensitive member information.

About Naples Heritage Golf & Country Club

Naples Heritage Golf & Country Club is a private golf and country club community located in Naples, Florida. The facility is situated on 550 acres of land and features extensive lakes and nature preserves. Due to its layout and environment, it is recognized as one of the lowest-density residential and social communities in the area.

Risk assessment and organizational implications

This incident may pose a high risk due to the potential exposure of members' personal and financial information. The presence of medical notes among the leaked data could lead to legal consequences under regulations such as HIPAA, which governs the protection of sensitive patient health information. For the individuals whose data has been exposed, there is an increased risk of identity theft and the possibility of being targeted in sophisticated phishing attacks.

For organizations operating within the hospitality and private club sectors, incidents like this highlight the critical importance of robust data security protocols. When sensitive member data, including financial and medical information, is at risk, the impact extends beyond immediate operational disruptions to long-term reputational damage and legal liabilities. To mitigate such risks, organizations are often advised to implement strict access controls, conduct regular security audits, and establish comprehensive incident response plans. Furthermore, notifying affected parties promptly is a vital step in managing the fallout of a data breach and helping individuals protect themselves from subsequent fraudulent activities.