ecsc.org Listed by incransom Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

The Electric Cooperatives of South Carolina, which operates the website ecsc.org, appeared on a listing published by the incransom ransomware group on January 16, 2026. The entry states that internal files were exfiltrated in a ransomware attack. No figure has been released for the number of individuals whose information may be involved, and the organization has not issued a public statement confirming or disputing the claims.

Inside the incident

The only confirmed detail is the January 16, 2026 listing itself. It asserts that files were removed from ecsc.org systems during a ransomware operation. No information has been made public about the date of the intrusion, the volume of data taken, the encryption status of systems, or whether any data was later published. The scale of the event and the method of initial access remain undisclosed.

The group behind it: incransom

Incransom is a ransomware operation that maintains a public leak site where it lists organizations it claims to have compromised. The group follows the common pattern of stealing data before encryption and then using the threat of publication to pressure victims. Its listings have included entities in multiple sectors, though each entry represents an unverified claim by the group until independently confirmed by the affected organization or law-enforcement findings.

About ecsc.org

ecsc.org is the public site for Electric Cooperatives of South Carolina, Inc., a statewide trade association that represents 18 consumer-owned electric cooperatives, one wholesale electric cooperative, one transmission cooperative, and one materials cooperative. The association supports the delivery of electricity to nearly two million people across the state and operates within the energy and utilities sector. Organizations of this type routinely hold member records, operational documents, and information related to infrastructure and service delivery.

What was likely exposed

The listing states that internal files were exfiltrated. No inventory of specific file types or data categories has been released. Organizations in the electric cooperative sector commonly maintain records that include member account details, billing information, and documents related to grid operations and regulatory compliance. The precise contents of any exfiltrated material have not been confirmed.

Why it matters

Exposure of internal files from an electric cooperative association can affect both the organization and the cooperatives it serves. Member data, if present, could be used for targeted fraud or identity-related activity. Operational documents could reveal details about service areas or infrastructure that are normally kept internal. The absence of Reported Details means the actual risk to individuals cannot yet be quantified.

If your data was in this claimed breach

Monitor accounts for unusual activity and consider placing fraud alerts with credit reporting agencies if personal identifiers were involved. Review any communications from your electric cooperative for guidance. Individuals can run a free exposure scan of their email address against known breach data to check for prior appearances in published records.

AICompiled with AI assistance from public sources and published under our editorial standards.