Second House listed on Inc Ransom leak site

• Ransomware group: Inc Ransom
• Country: Spain
• Sector: Hospitality
• Announcement date: September 21, 2026

Inc Ransom claims attack on Second House

The Inc Ransom ransomware group has listed the Spanish-based real estate company SECOND HOUSE on its dedicated leak site. The group has claimed responsibility for a cyberattack against the organization, marking the beginning of a potential data exposure incident. This announcement was officially added to the group's platform on September 21, 2026.

The group's listing of the organization serves as a public claim that the company's operational data has been compromised. By publishing the organization's name on their leak site, the threat actors have initiated a process that often involves the use of stolen information to pressure victims. In this specific case, the group has started by sharing information related to the company's general operations.

Details of the alleged breach

Regarding the specific nature of the data involved in this incident, the group has not provided any specific details. While the exact contents of the alleged breach remain unspecified, the Inc Ransom group typically targets corporate documents and sensitive information during their operations. This type of targeting is a common characteristic of modern ransomware groups seeking to maximize their leverage.

The listing currently names no specific data types that have been exfiltrated.

About Second House

Second House is a privately held real estate company headquartered in Barcelona, Spain. The organization possesses over 26 years of experience within the property sector. The company focuses its business model on revitalizing the real estate market through a specific strategic approach. This involves acquiring properties and adding value to them through various methods, such as renovations, improving rental conditions, and the legalization of building statuses.

Risk assessment and industry implications

This incident indicates that the organization may face a significant risk of exposure regarding its business operations and customer data. Because the company operates within Spain, a potential data breach of this nature could lead to legal sanctions under the European Union's General Data Protection Regulation (GDPR). The regulatory framework of the GDPR imposes strict requirements on how personal data must be protected and how breaches must be managed.

Given the double-extortion tactics frequently employed by the Inc Ransom group, the organization may experience disruptions to its operational continuity. Double extortion is a method where attackers not only encrypt a victim's data but also steal it, threatening to leak the sensitive information if a ransom is not paid. This tactic increases the pressure on the victim and introduces secondary risks, such as the potential for identity theft or the occurrence of targeted phishing attacks against the company or its clients.

Furthermore, the company's established position in the real estate sector may create indirect effects on the broader supply chain. When a significant player in a specific market is targeted, it can create ripple effects for partners and service providers. To mitigate such risks, organizations in this sector typically focus on robust defensive postures, including regular backups, employee security training, and strict access controls to prevent unauthorized data exfiltration.