Incransom Claims 12 TB Data Exfiltration from Harwal Group

Summary
Ransomware.live reports that Incransom claims to have exfiltrated 12 TB of data from Harwal Group in the UAE. The post cites the group’s disclosure page and says the claim is unconfirmed.
Key points
- Ransomware.live lists Harwal Group (harwal[.]net) as the victim of an Incransom claim.
- Incransom claims to have exfiltrated 12 TB of data; the article says it cannot confirm the claim.
- The record cites the actor’s disclosure page as its source.
- The claim was discovered and published on July 29, 2026.
Article Details
- Victim
- Harwal Group
- Victim Domain
- harwal.net
- Claim Date
- 2026-07-29
- Encryption Status
- Unknown
- Exfiltration Status
- Claimed by incransom; unverified
- Exfiltrated Data
- incransom claimed to have exfiltrated data from Harwal Group; the source says the claim could not be confirmed.
- Exfiltrated Size
- 12 TB (claimed; unverified)
- Ransom Demand
- Unknown
- Leak Status
- The claim was posted on incransom's disclosure site; publication of data and its authenticity are not confirmed.
Threat Actors
Countries
Industries
ManufacturingThe group, which operates manufacturing and recycling businesses across multiple divisions and countries, is impacted in UAE #UnitedArabEmiratesRecyclingThe group, which operates manufacturing and recycling businesses across multiple divisions and countries, is impacted in UAE #UnitedArabEmirates
