Ransom! dwgra.com

Incransom claims to have compromised dwgra.com, a Canadian brokerage firm, by accessing sensitive fiscal data, internal communications, employee information, and strategic plans. The affected country is #Canada.

Incident Details

  • Victim: dwgra.com
  • Country: CA
  • Actor: incransom
  • Source: http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/68fe0cbfe1a4e4b3ff53d421
  • Discovered: 2025-10-27 00:44:41.799148
  • Published: 2025-10-26 08:00:00.000000

Information

  • DWGRA.com was targeted by ransomware actors known as incransom.
  • The company is based in Canada and operates as a private, non-commission brokerage.
  • Derek Gould serves as President and Broker of Record at D.W. Gould Realty Advisors Inc.
  • Mr. Gould has a background as Vice President at CBRE Limited before founding his own brokerage in June 2013.
  • The brokerage provides services to corporations and individuals across the Greater GTA and throughout Ontario, from London to Kingston, north to Sudbury, North Bay, and further north.
  • Attackers likely accessed sensitive data, including fiscal information, internal emails, employee data, and strategic development plans.

Disclaimer: This post is based on public claims made by the ransomware group "incransom". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live