Incransom Claims Corona Law Firm as Victim, Threatens Data Leak

Summary
Incransom claims it compromised Corona Law Firm (coronapa[.]com) and threatens to leak confidential client data and deploy ransomware unless a ransom is paid. The claim is unconfirmed.
Key points
- The monitoring record identifies Corona Law Firm, associated with coronapa[.]com, as the named victim.
- The record attributes a claim to Incransom and links it to the actor's disclosure page.
- Incransom allegedly threatens to leak confidential client data and deploy ransomware unless a ransom is paid.
- The publisher says it cannot confirm the claim's accuracy; no independent confirmation is provided.
Article Details
- Victim
- Corona Law Firm
- Victim Domain
- coronapa.com
- Claim Date
- 2026-04-03
- Encryption Status
- Unconfirmed. Incransom claims to have compromised the victim and threatens to deploy ransomware.
- Exfiltration Status
- Unknown; the source does not confirm that data was exfiltrated.
- Ransom Demand
- Incransom threatens to leak data and deploy ransomware unless a ransom is paid; no amount is disclosed.
- Leak Status
- Incransom threatens to leak confidential client data; no leak is reported or confirmed.
