Incransom Claims Belpointe Asset Management as a Victim
Summary
Incransom claims Belpointe Asset Management/Belpointe was affected and alleges 400 GB was stolen. ransomware.live says it cannot confirm the claim.
Key points
- The record identifies Belpointe Asset Management/Belpointe as the named victim and Incransom as the actor.
- Incransom allegedly claimed 400 GB of stolen data; the monitoring post says the information is unconfirmed.
- The claim is attributed to an Incransom disclosure at hxxp://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad[.]onion/blog/disclosures/6a39bd685ae71db30c36b16f.
- The record lists the claim as published on June 22, 2026, and discovered later that day.
Article Details
- Victim
- Belpointe Asset Management / Belpointe
- Victim Domain
- belpointeasset.com; belpointe.com
- Claim Date
- 2026-06-22
- Encryption Status
- Unconfirmed. The article describes approximately 400 GB of encrypted/compromised data but says its information is based on the ransomware group's claims and cannot be confirmed.
- Encrypted Size
- Approximately 400 GB, described as encrypted/compromised; unconfirmed.
- Exfiltration Status
- Alleged by incransom; the source says the group claimed 400 GB was stolen. Not independently confirmed.
- Exfiltrated Data
- Not disclosed.
- Exfiltrated Size
- Approximately 400 GB allegedly stolen, according to the group claim.
- Ransom Demand
- Not disclosed. The article mentions demands consistent with the group's tactics but provides no amount or confirmation of a specific demand.
- Leak Status
- Unknown; the article does not report whether data was published.