farbank.com (flywatertravel) Listed by incransom Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On February 17, 2026, the ransomware group incransom listed farbank.com, operating as Fly Water Travel, on its leak site. The listing states that 100 GB of internal files were taken during a ransomware incident. Public details remain limited to the group’s claim and the reported volume of data; the number of individuals affected and any confirmation of the exfiltration have not been disclosed. The incident adds to the pattern of targeted operations against mid-sized companies that hold operational records, customer booking information, and proprietary materials. Such listings typically surface when ransom negotiations stall, shifting the focus from encryption to potential publication of stolen material.

Inside the incident

The available facts indicate that incransom claims to have exfiltrated 100 GB of internal files from Far Bank Enterprises. No public statement from the company has confirmed the timeline of the intrusion, the method of access, or whether encryption occurred alongside the data removal. The number of people whose information may be involved is listed as unknown.

The group behind it: incransom

Incransom is a ransomware operator that maintains a leak site to publish data from organizations that do not meet its demands. Groups of this type commonly gain initial access through phishing, exposed remote services, or third-party vendors, then move laterally to locate and copy files before deploying encryption. Their listings serve as both a pressure tactic and a signal to other potential targets. No independent verification of the farbank.com claim has been reported beyond the group’s own site.

About farbank.com (flywatertravel)

Far Bank Enterprises manufactures and distributes fly-fishing equipment under brands including Sage, Redington, and RIO Products. Its subsidiary Fly Water Travel arranges guided fishing trips and travel packages. Organizations in this sector routinely collect customer names, contact details, payment information, passport data for international travel, and internal documents related to inventory, suppliers, and operations.

What data was at risk

The listing describes the material as internal files and confidential documents totaling 100 GB. Exact categories of data have not been published or independently confirmed. Companies of this type typically store records that include customer booking histories, financial transactions, employee files, and proprietary product specifications.

The real-world impact

Individuals whose details appear in the exfiltrated files could face increased risk of targeted phishing or account misuse if the material is later published or sold. For the organization, the exposure of internal documents may affect supplier relationships, competitive positioning, or regulatory obligations depending on the jurisdictions involved. No evidence of subsequent misuse has been reported in connection with this listing.

What to do if you're exposed

Monitor bank and credit accounts for unusual activity and place fraud alerts with major credit bureaus if personal financial data may be involved. Change passwords for any accounts associated with the organization and enable multi-factor authentication where available. Readers can run a free exposure scan of their email address to check whether their information has appeared in known breach datasets.

• Review recent statements from financial institutions linked to any bookings or purchases.
• Request a copy of your data from the company if you are a customer or former employee.
• Remain alert for unsolicited messages referencing fly-fishing travel or equipment orders.

AICompiled with AI assistance from public sources and published under our editorial standards.