Incransom has claimed to have encrypted data belonging to tsaWorld.com, a US-based office equipment and supplies retailer, threatening to release or delete the data unless a ransom is paid. The attack highlights the vulnerabilities faced by small retail businesses in the US. #United States
Incident Details
- Victim: tsaworld.com
- Country: US
- Actor: incransom
- Source: http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/686b9a0bc7b82dfe0b8200b7
- Discovered: 2025-07-07 10:47:41.573083
- Published: 2025-07-07 02:56:00.000000
Information
- Ransomware attack targeted TSAworld Inc.
- Company specializes in office equipment and supplies, including projectors, printers, copiers, and scanners
- Provides associated parts and maintenance kits for office equipment
- Caters to clients seeking technical expertise and quality office solutions
- Offers resources such as credit applications and an exchange program to support customers
- Based in Peachtree Corners, Georgia
- Emphasizes customer service and support for all products and services
- Has 25 employees
- Operates in the retail industry
- Downloaded 25GB of data
- Contact phone number: (770) 417-2323
Disclaimer: This post is based on public claims made by the ransomware group "incransom". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.