LowBreach / campaignMonitoring

Inc Ransom group claims attack on Coeur Mining, per RansomLook

RansomLook reports that the Inc Ransom group listed Coeur Mining Inc on its leak site; the company has not confirmed it, so monitor official statements.

Published
Exploitation
Not confirmed. The only source is a leak-site claim tracked by RansomLook, with no victim confirmation or independent verification.

What happened

According to RansomLook, a ransomware tracking site, the ransomware group Inc Ransom lists “coeur mining inc” as a victim on its leak site. RansomLook’s headline for the entry is dated 2026-11-10 RansomLook: coeur mining inc: claimed by the inc ransom ransomware group on its leak site.

Only the headline could be retrieved. The full article could not be reviewed. A leak-site listing is the group’s own claim, not proof of an intrusion.

Not confirmed:

  • Whether Coeur Mining has acknowledged any incident.
  • Whether any systems were encrypted or any data was stolen.
  • The entry point, the type or volume of data involved, and any ransom demand.
  • Any independent verification: no other outlet carrying this story was found.

Am I affected?

Not confirmed. The source does not say what data or systems, if any, are involved, and it does not name any affected customers, partners or employees. If you have a relationship with Coeur Mining, the only way to know is an official notice from the company.

What to do now

  1. Watch for an official statement or regulatory filing from Coeur Mining. None is cited in the source.
  2. If you do business with the company, verify any unusual payment, banking-detail or credential requests through a known contact, not through the message itself.
  3. Treat this advisory as provisional. It will be updated if the company or an independent source confirms or denies the claim.

Sources