Pennsylvania Office of Attorney General listed by Inc Ransom

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Government & Defense
• Announcement date: September 21, 2025

Inc Ransom claims data breach at Pennsylvania Office of Attorney General

The threat actor known as Inc Ransom has listed the Pennsylvania Office of Attorney General on its leak site. According to the group's announcement made on September 21, 2025, the attackers claim to have exfiltrated a significant amount of data, totaling 5.7TB, which allegedly belongs to the Commonwealth of Pennsylvania's official law enforcement agency.

Details of the alleged attack

The incident was announced on September 21, 2025, the same date the group claims the attack occurred. In their post, Inc Ransom asserts that they have successfully gained unauthorized access to the internal network of the Pennsylvania Office of Attorney General. Furthermore, the group has made the extraordinary claim that they have also gained access to the network of the FBI.

To support their claims of successful infiltration, the group has provided several screenshots. These images allegedly contain samples of internal correspondence and various operational documents belonging to the institution. These visuals are intended to serve as proof that the attackers have successfully breached the organization's digital perimeter and accessed sensitive internal communications.

Data and files involved in the leak

While the total volume of the alleged data theft is cited at 5.7TB, the specific file count has not been provided by the threat actor. The leaked information, as described by the group, includes several types of sensitive documentation. The following items have been identified as part of the alleged breach:

• Internal corporate correspondence
• Operational documents

The presence of these documents on a leak site indicates a targeted approach to data exfiltration, focusing on the administrative and operational heart of the agency.

About the Pennsylvania Office of Attorney General

The Pennsylvania Office of Attorney General serves as the official law enforcement agency for the Commonwealth of Pennsylvania. The agency plays a critical role in the state's legal infrastructure by providing essential legal services to various state agencies and to the citizens of Pennsylvania. Additionally, the office is responsible for the enforcement of state laws, making it a central pillar of the state's judicial and law enforcement framework.

Analysis and potential impact

This incident carries a high level of severity due to the potential risks associated with exposing sensitive data from a government entity. The claims made by Inc Ransom regarding access to both the state agency's internal networks and FBI networks could potentially lead to negative impacts on national security and law enforcement operations. Such an event highlights the vulnerabilities that high-profile government organizations face from sophisticated threat actors.

Under United States state laws and federal data protection standards, a breach of this nature may necessitate a comprehensive investigation and a formal notification process to affected parties. The use of double-extortion tactics—a method where attackers both encrypt data and threaten to leak it—is a hallmark of groups like Inc Ransom. This tactic increases the pressure on organizations, as the leaked data can be utilized for malicious purposes such as identity theft or targeted phishing attacks against employees or citizens.

In the government and defense sector, organizations often implement defensive measures such as network segmentation, multi-factor authentication, and continuous monitoring to mitigate these risks. However, the claim of network access to federal entities underscores the complexity of modern cyber threats. At this time, information regarding the specific capabilities and background of the Inc Ransom group remains limited.