The City of Hesperia, CA listed on Inc Ransom leak site

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Government & Defense
• Announcement date: March 4, 2026

The Inc Ransom group has listed data on its leak site that it claims belongs to The City of Hesperia, CA. This announcement, made on March 4, 2026, suggests that the threat actor has successfully targeted the local government entity.

The claimed attack and event details

According to the announcement made by the threat actor known as Inc Ransom, the group claims to have gained unauthorized access to the systems of The City of Hesperia, CA. This breach, which the group claims occurred on March 4, 2026, involves the alleged acquisition of various sensitive files from the institution's infrastructure.

The group's claim suggests that the compromise is not limited to a single category of information. Instead, the announcement indicates that both operational and personal data belonging to the institution have been compromised. This type of breach targets the core functions of a municipality, potentially impacting both its internal administration and its interactions with the public.

The alleged compromised data

The content of the data claimed by the Inc Ransom group is extensive and covers a wide range of sensitive categories. The alleged data includes state secrets, non-disclosure agreements, and contracts with both private and public companies. Furthermore, the group claims to have obtained personal data belonging to employees and government officials, as well as various financial and administrative documents.

The specific types of data mentioned in the listing include:

• Employee personal data
• Government official personal data
• Non-disclosure agreements
• Contracts
• Transaction records
• Payment documents
• Tax documents

While the group has made these claims, no specific information was provided regarding the total size of the data or the exact file count involved in the incident. Additionally, no ransom demand has been disclosed by the group in the current announcement.

About The City of Hesperia, CA

Hesperia is a city located in the state of California, United States. It serves as a local government entity situated within San Bernardino County.

Analysis and potential risks

Given that the Inc Ransom group employs a double-extortion strategy, there is a significant risk that the claimed data may be leaked publicly or sold on the dark web. Double extortion is a common ransomware tactic where attackers not only encrypt an organization's data but also steal it, threatening to release it to pressure the victim into paying the ransom. This method increases the pressure on the target, as the threat of public disclosure remains even if systems are restored from backups.

The potential consequences of such a breach are multifaceted. For the institution's employees and officials, the disclosure of personal data may lead to secondary risks such as identity theft and targeted phishing attacks. For the institution itself, the disclosure of sensitive information could lead to reputational damage and operational disruptions. Furthermore, as a public institution operating in the United States, the incident may trigger legal processes under state-level data protection laws and federal regulations.

The Inc Ransom group, which emerged in mid-2023, remains a subject of limited public information. Organizations in the government and defense sector often face these types of threats due to the sensitive nature of the data they manage. To mitigate such risks, organizations typically focus on robust defensive measures, including network segmentation, regular security audits, and comprehensive employee training to prevent initial access.