Ransom! phi.ca

Incransom has targeted phi.ca, a Canadian organization specializing in immersive VR, AR, and XR experiences, demanding ransom in exchange for withheld data. The attack underscores the growing threat of ransomware to innovative technology sectors in Canada. #Canada

Incident Details

  • Victim: phi.ca
  • Country: CA
  • Actor: incransom
  • Source: http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/68da5cbffa0b6f4bdf739e7a
  • Discovered: 2025-09-29 10:22:37.808546
  • Published: 2025-09-29 00:00:00.000000

Information

    • Ransomware victim is phi.ca.
    • The incident occurred in Canada.
    • The threat actor involved is incransom.
    • PHI Studio specializes in the presentation and curation of immersive works in virtual reality (VR), augmented reality (AR), and extended reality (XR).

Disclaimer: This post is based on public claims made by the ransomware group "incransom". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live