falp.org Listed by incransom Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On December 08, 2024, the ransomware group known as incransom listed falp.org on its leak site, claiming to have conducted a ransomware attack that involved the exfiltration of internal files. The organization is identified as Fundación Arturo López Pérez. Public detail remains limited: the number of people affected is unknown, and no further confirmation of the incident has been independently verified beyond the group's listing.

This matters because falp.org operates in a sensitive sector where internal records can include operational and personal information. A listing of this kind signals a potential compromise that could expose data held by the foundation, even if the full scope stays unconfirmed.

Breaking down the breach

According to the available record, falp.org was listed by the incransom ransomware group on December 08, 2024. The group claims that internal files were exfiltrated as part of a ransomware attack. No public information has been provided on the precise timing of any intrusion, the method of access, the volume of data taken, or any ransom demand. The number of individuals potentially affected is listed as unknown. All details beyond the group's claim of an attack involving internal-file exfiltration remain undisclosed.

The listing itself constitutes the primary public indicator of the incident. No independent confirmation of successful encryption, payment, or full data release has been included in the reported facts. As with many such claims, the assertion originates from the threat actor's own site and should be treated as unverified until additional evidence appears.

Who is incransom?

Incransom is a ransomware operation that has appeared in public reporting as a group employing double-extortion tactics. In this model, operators typically encrypt systems and simultaneously claim to have stolen data, then threaten to publish the material on a dedicated leak site if payment is not made. The group has listed multiple organizations across sectors in the past, using its site to name victims and, in some cases, to release sample files as proof of access.

Public knowledge of incransom centers on its pattern of targeting entities that hold valuable or sensitive records, followed by public claims of exfiltration. Specific statements the group may have made about falp.org beyond the listing itself are not detailed in the available facts; therefore only the general claim of a ransomware attack with internal-file exfiltration is noted here. No further operational details unique to this incident have been disclosed.

falp.org and its sector

falp.org is the online presence of Fundación Arturo López Pérez, a Chilean non-profit foundation focused on cancer care, research, and patient support. Organizations of this type typically operate medical facilities, manage patient treatment programs, and handle administrative, clinical, and donor-related records. They sit at the intersection of healthcare delivery and charitable activity, which means they routinely process information that is both personal and operationally sensitive.

A breach claim against such an entity carries weight because health-related foundations often maintain detailed internal files on patients, staff, research, and finances. Even when the exact contents of any stolen material remain unconfirmed, the sector's reliance on confidentiality makes any reported compromise consequential for trust and continuity of services.

What data was at risk

The facts state that internal files were exfiltrated in the claimed ransomware attack. No further breakdown of file types, categories, or specific records has been disclosed. The number of people affected is unknown.

Organizations such as Fundación Arturo López Pérez commonly hold patient medical information, staff records, financial and donor data, research materials, and administrative documents. Because the precise contents of the exfiltrated material have not been confirmed, it is not possible to state which of these categories, if any, were involved. The only named exposure is the general category of internal files claimed by the group.

The real-world impact

For individuals whose information may have been among the internal files, the primary risks include potential misuse of personal or medical details, identity-related fraud, or unwanted contact. Because the scale and exact data types remain unknown, the concrete exposure for any single person cannot be quantified from public information. The organization itself faces operational disruption, potential regulatory scrutiny, and the need to assess whether systems remain secure and whether notifications to affected parties are required under applicable law.

In practical terms, the impact is measured by uncertainty: without Reported Details on what left the network, both the foundation and any individuals connected to it must treat the claim as a serious indicator rather than a fully documented event. Reputational and continuity effects can follow even when technical recovery is complete.

What to do if you're exposed

If you have a connection to Fundación Arturo López Pérez—as a patient, staff member, donor, or partner—monitor financial and medical accounts for unusual activity and consider placing fraud alerts with credit bureaus where available. Change passwords on any accounts that may have used related credentials, and enable multi-factor authentication wherever possible. Keep records of any unexpected communications that reference the foundation or personal details.

Readers can also run a free exposure scan of their email address to check whether their information has already appeared in known breach data sets. This step provides an immediate, practical way to assess whether personal details have surfaced publicly, independent of the still-unconfirmed specifics of this particular incident.

AICompiled with AI assistance from public sources and published under our editorial standards.