LowBreach / campaignMonitoring

Inc ransom group claims attack on PT Forisa Nusapersada

RansomLook reports that the inc ransom group lists PT Forisa Nusapersada on its leak site; the claim is unconfirmed, so monitor official statements.

Published
Exploitation
Not confirmed. The only source is a leak-site claim tracker listing, with no victim confirmation.

What happened

According to RansomLook, a ransomware leak-site tracker, the inc ransom ransomware group claims PT Forisa Nusapersada on its leak site. The listing is dated 2026-11-10 in the headline RansomLook. A leak-site listing is the group’s own claim, not proof of an intrusion.

Only the headline could be retrieved. The full article could not be reviewed, so this advisory goes no further than that headline. The following are not confirmed:

  • Whether PT Forisa Nusapersada has confirmed or denied the claim.
  • Whether any data was stolen or any systems were encrypted.
  • The entry point, the volume or type of data, and any ransom demand.
  • Any independent verification of the claim.

Am I affected?

Not confirmed. The only source is a claim tracker listing, and it names no affected systems, products, CVEs or data types. If you have a business relationship with PT Forisa Nusapersada, the listing suggests you should watch for official communication from the company. No evidence in the source shows impact on any third party.

What to do now

  1. Watch the company’s official channels for a statement confirming or denying the incident.
  2. If you are a partner or supplier, ask your usual contact at the company whether your data or connections are involved, and use only contact details you already hold.
  3. Treat unexpected emails or calls that reference this claim with caution, and do not open attachments or links from unverified senders.
  4. Re-check this advisory when a confirmed source is available. Nothing beyond the headline is established.

Sources