Ransomware needs a way in. Stolen credentials are the cheapest one.

Rohloff Group Ransomware Attack

Ransomware victimRansomed

INC RansomGroup

South AfricaCountry

Aug 27, 2026Discovered

Data has been published on the ransomware group's leak site.

Overview

View group profile

Industry

Manufacturing

Country

South Africa

Discovered

about 5 hours ago

Attack date

Aug 27, 2026

Confidence

100%

Severity

Critical

Status

Data Leaked

Threat group

INC Ransom

Total victims

238

First seen

Aug 2025

Last seen

Jul 2026

Group status

active

Sophistication

Impact score

121

Threat level

4.1/10

Aggressiveness10/10

Lethality0.1/10

Criticality2/10

Status breakdown

Data Leaked

this victim

6.5%3

Negotiating4.3%2

Claimed89.1%41

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Manufacturing

Known target sector

Country

South Africa

Frequently targeted country

Other victims

View all (284)

Same group · INC Ransom

Group activity

Monthly attacks · INC Ransom

238

total · avg 19.8/mo