THREATOPS

THREAT OPS › Threat News › INC Ransom Targeted 24 Law Firms, but Only 10 are Listed

INC Ransom Targeted 24 Law Firms, but Only 10 are Listed

medsocradar_blogPublished 2026-08-11

<h1>INC Ransom Targeted 24 Law Firms, but Only 10 are Listed</h1> <p>INC was on an encryption streak against US law firms in <a href="https://www.halcyon.ai/ransomware-alerts/inc-ransom-group-mounts-rapid-campaign-against-law-firms" rel="nofollow noopener" target="_blank">March 2026</a>. SOCRadar identified 24 individualized extortion sites, hosted across two IP addresses, that we assess with high

Attributed threat actors

INC RansomG1032

MITRE ATT&CK techniques

IP AddressesT1590.005
Social EngineeringT1684
CredentialsT1589.001

Indicators of compromise

https://www.halcyon.ai/ransomware-alerts/inc-ransom-group-mounts-rapid-campaign-against-law-firmsurl
leak.comdomain

Original source: https://socradar.io/blog/inc-ransom-law-firm-extortion/