Omrania listed on Inc Ransom leak site with claims of massive data exfiltration

• Ransomware group: Inc Ransom
• Country: Saudi Arabia
• Sector: Professional Services
• Announcement date: December 29, 2025

The international architecture and engineering firm Omrania has been listed on the Inc Ransom leak site. The ransomware group claims to have successfully exfiltrated a massive volume of data, totaling 4000 GB, from the organization's systems.

The alleged incident and group claims

According to the announcement published on the Inc Ransom leak site on December 29, 2025, the group claims to have gained unauthorized access to corporate data. The group states that the incident occurred on December 28, 2025. The announcement alleges that the institution's confidential documents and project files have been compromised during this event.

Inc Ransom is a ransomware group that emerged in mid-2023. The group is known for employing double-extortion tactics. In such scenarios, threat actors typically steal sensitive information before encrypting a victim's systems, using the threat of leaking the stolen data to pressure the organization into paying a ransom. This method adds a layer of pressure beyond simple service disruption, as the victim faces the risk of public exposure of their private information.

Details of the allegedly leaked data

The data allegedly stolen by the group is extensive. Based on the claims made by the attackers, the leak includes a wide variety of sensitive information. The group has provided screenshots that purportedly display various contract samples and project documentation to support their claims.

The types of data allegedly involved in this breach include:

• Confidential documents
• Client data
• Non-disclosure agreements (NDA)
• Financial data
• Corporate data
• Business agreements
• Projects
• Drawings

About Omrania

Omrania is an international architecture, planning, and engineering firm based in Saudi Arabia. The company develops projects of various scales, including urban design, landscape architecture, and interior design.

Potential impacts and security considerations

This leak claim may create negative impacts on Omrania's client confidentiality and trade secrets. The financial and contractual data allegedly leaked may pose secondary risks for the institution's supply chain partners and clients. Furthermore, it is possible that the published data could be utilized for targeted phishing attacks, where attackers use stolen information to craft convincing fraudulent communications.

Because the leaked data includes sensitive business agreements and client information, legal processes may be triggered under data protection regulations in the region where the institution operates. Such incidents highlight the importance of robust data protection frameworks and regulatory compliance for professional services firms.

For organizations operating in the professional services sector, maintaining high standards of cybersecurity is essential to protect intellectual property and client trust. Common defensive steps for organizations facing such threats include implementing strict access controls, maintaining offline backups, and conducting regular security audits. Additionally, monitoring for unauthorized data exfiltration and enhancing employee awareness regarding phishing attempts are critical components of a modern defense-in-depth strategy. As ransomware groups continue to evolve their tactics, organizations must remain vigilant in protecting their digital assets and sensitive project documentation.