aircotedivoire.com Listed by incransom Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On February 19, 2026, the ransomware group incransom listed aircotedivoire.com on its leak site. The listing states that internal files were exfiltrated during a ransomware attack against the airline. No figure has been released for the number of individuals whose information may be involved, and the airline has not confirmed the incident or provided further details. The practical stakes for passengers, employees and business partners centre on the handling of whatever internal records were taken. Without confirmed information on the contents of those files, affected people cannot yet assess their specific exposure.

Inside the incident

The only public record of the event is the February 19, 2026 listing by incransom. The entry claims that files were removed from aircotedivoire.com systems. No date of intrusion, volume of data or ransom demand has been disclosed. The airline has not issued a statement, and independent verification of the claim remains unavailable.

The group behind it: incransom

Incransom is a ransomware operation that maintains a public leak site where it lists organisations it claims to have targeted. The group follows the common pattern of encrypting systems and threatening to publish stolen material unless a ransom is paid. Its listings are presented by the group itself and are not independently confirmed at the time they appear. Prior activity attributed to the group in public reporting has involved similar claims against companies in multiple sectors, with data later offered for sale when negotiations fail.

Who is aircotedivoire.com?

Air Côte d'Ivoire is an airline based in Abidjan, Ivory Coast. It was established in 2012 and operates direct flights within the region. The company employs approximately 1,000 people and reports annual revenue of 40.5 million. As an airline it maintains records on passengers, bookings, crew and operational matters typical of the sector.

What data was at risk

The listing refers only to “internal files.” No inventory of file types or data categories has been published. Airlines routinely process passenger names, contact details, travel itineraries, payment information and employee records. Whether any of these categories were among the exfiltrated material is not confirmed.

The real-world impact

Until the contents of the files are known, the concrete risks to individuals remain general. Personal data held by airlines can be used for identity-related fraud or targeted scams. For the airline, the incident adds operational and regulatory pressure at a time when carriers already manage strict requirements for passenger data protection. No evidence of subsequent misuse of any specific records has been reported.

If your data was in this claimed breach

Individuals who have flown with Air Côte d'Ivoire or worked with the company can take standard protective steps while awaiting further information from the airline.

• Monitor bank and credit-card statements for unauthorised activity.
• Enable multi-factor authentication on any accounts linked to the airline or to travel bookings.
• Consider a credit freeze if financial details may have been exposed.
• Run a free exposure scan of your email address against known breach datasets to check for prior appearances of your information.

AICompiled with AI assistance from public sources and published under our editorial standards.