Incransom Claims Data Exfiltration From Cerboni Services
Summary
Incransom claims it exfiltrated data from cerboniservices[.]com and threatens public release unless a ransom is paid. The claim is unconfirmed.
Key points
- The monitored record identifies cerboniservices[.]com, a US-based bookkeeping, tax, and CFO services provider, as the victim.
- The claim is attributed to the ransomware actor incransom and alleges data exfiltration.
- The actor reportedly threatens to publicly release the data unless a ransom is paid.
- The article says the claim is based on public statements by incransom and has not been independently confirmed.
Article Details
- Victim
- cerboniservices.com
- Victim Domain
- cerboniservices.com
- Claim Date
- 2026-03-24
- Encryption Status
- Unknown
- Exfiltration Status
- Alleged by incransom; unverified.
- Exfiltrated Data
- Not disclosed
- Ransom Demand
- The claim threatens public release unless a ransom is paid; no amount is disclosed.
- Leak Status
- An impending public release is threatened; no publication is reported.
Threat Actors
Countries
Industries
ConstructionAlso serves retail, healthcare, and construction sectorsHealthcareAlso serves retail, healthcare, and construction sectorsHospitalityA ransomware claim targets cerboniservices.com, a US-based provider of bookkeeping, tax, and CFO services for restaurants and hospitality, with incransom identified as the threat actor.RetailAlso serves retail, healthcare, and construction sectors