Foamtec International Listed by incransom Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Foamtec International, a manufacturer of specialty polyurethane foam products, was listed by the incransom ransomware group on or around February 1, 2026. Public records show only that internal files were stated to have been exfiltrated during a ransomware attack; the number of individuals affected remains unknown and no further details on the scope or confirmation of the listing have been released. The incident is significant because the company operates in contamination-control and medical markets, where even limited exposure of internal records can affect supply chains and regulatory compliance.

Inside the incident

The only confirmed public information is the listing itself and the statement that internal files were taken. No timeline for the intrusion, no count of records, and no description of the encryption or exfiltration method have been disclosed. Foamtec International has not issued a separate statement confirming or denying the claims.

The group behind it: incransom

incransom is a ransomware operation that maintains a leak site where it lists organizations it claims to have compromised. The group typically pairs file encryption on victim systems with the removal of data copies, then uses the site to pressure targets. Its listing of Foamtec International constitutes the group’s assertion that it holds material from the company; independent verification of that assertion has not been published.

Foamtec International and its sector

Foamtec International produces specialty foam components used in contamination-control, medical, and industrial applications. Organizations in this sector routinely maintain records on product formulations, customer specifications, quality-control documentation, and supplier contracts. A successful intrusion therefore carries the possibility of affecting both proprietary processes and downstream partners that rely on those materials.

What data was at risk

The listing refers only to “internal files exfiltrated.” No inventory of file types or record counts has been released, so the precise contents remain unconfirmed. Typical holdings for a manufacturer of this kind include:

• Technical specifications and formulation data
• Customer and order records
• Employee or contractor contact information
• Regulatory and quality-assurance documentation

Why it matters

Even without a confirmed record count, exposure of internal manufacturing files can create competitive or regulatory consequences for the company and its clients. Individuals whose information appears in customer or employee files may face follow-on risks such as targeted phishing or account misuse, though the scale of any such exposure is still unknown.

Were you affected?

Begin by monitoring official statements from Foamtec International for any notification process. Review bank and credit accounts for unusual activity and consider placing a fraud alert if personal identifiers were likely stored by the company. Readers can also run a free exposure scan of their email address against known breach data sets to check for prior appearances of their information.

AICompiled with AI assistance from public sources and published under our editorial standards.