VULNpocalypse
LowBreach / campaignMonitoring

Inc ransom group claims attack on Kolin, per RansomLook listing

RansomLook reports that the inc ransom group lists Kolin on its leak site; the claim is unconfirmed, so monitor official Kolin notices.

Published
Exploitation
No confirmation. The only evidence is a leak-site listing reported by RansomLook, which is a claim and not proof.

What happened

According to RansomLook, the inc ransom ransomware group claims Kolin on its leak site. RansomLook’s headline, dated 2026-11-10, reads “Kolin: claimed by the inc ransom ransomware group on its leak site” (RansomLook).

Only the headline could be fetched. The full article could not be reviewed, so this advisory goes no further than that headline. A leak-site listing is the group’s own claim, not proof of an attack.

Not confirmed:

  • Whether Kolin has confirmed or denied the claim.
  • Whether any independent party has verified it.
  • Which Kolin organisation is meant, and what kind of entity it is.
  • The entry point, the type or volume of any data, and any dates of intrusion.
  • Whether any systems were encrypted or any data was stolen.

Am I affected?

Not confirmed. The headline gives no detail about affected systems, people or data. Kolin has not confirmed the claim in the material available. If you have a relationship with an organisation called Kolin, check its official channels for a statement. Do not rely on the leak-site listing alone.

What to do now

  1. Watch Kolin’s official website and communications for any incident notice.
  2. If you deal with Kolin, be careful with unexpected emails, calls or payment-change requests that refer to this incident, and verify them through a known contact.
  3. Revisit this advisory when Kolin or a primary source confirms or denies the claim.

Sources