The ransomware claim involves incransom targeting Sandberg, a leading materials testing consultancy in Great Britain, by exfiltrating 100GB of highly sensitive data including confidential documents, client information, NDAs, financial records, operational data, and business agreements. The breach poses a significant threat to Sandbergβs operations and reputation, impacting the United Kingdom.
Incident Details
Information
- Sandberg is an independent consultancy firm established in 1860, specializing in materials testing, inspection, and consultancy services within the construction industry.
- The company provides a variety of services including laboratory testing, site inspections, and quality assurance for materials such as concrete, stone, and metals.
- The ransom amount demanded was 100GB of data.
- The data collected includes confidential documents, client data, NDAs, financial data, operational information, corporate data, business agreements, development records, financial databases, transaction histories, and client information.
- The actor responsible for the ransomware attack is incransom.

Disclaimer: This post is based on public claims made by the ransomware group "incransom". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.