https://www.fulcrumre.com/ Listed by incransom Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On April 29, 2026, the ransomware group incransom listed Fulcrum RE on its leak site, claiming to have taken internal files from the company. The number of people whose information may be involved is not known, and no confirmation of the listing or the claimed volume of data has been made public by Fulcrum RE. The incident matters because Fulcrum RE holds records that can include personal and financial details of clients, employees, and business partners. When such records are removed from an organisation’s control, the individuals named in them can face downstream risks that are difficult to reverse.

What happened

The only confirmed public information is the listing itself. Incransom posted Fulcrum RE on its site on April 29, 2026, and stated that it had exfiltrated internal files. The group described the material as two terabytes of “all company data.” No independent verification of the volume, the date of the intrusion, or the method used has been released. Fulcrum RE has not issued a statement confirming or denying the claim.

Who is incransom?

Incransom is a ransomware operator that has appeared on leak sites since at least 2023. Like other groups of its kind, it typically gains access through remote-desktop services or unpatched systems, deploys encryption, and removes copies of files before demanding payment. When a victim does not pay, the group publishes samples or directories on its site to pressure the target. The listing of Fulcrum RE follows this pattern; the group claims the data but has not published additional evidence in this instance.

Who is Fulcrum RE?

Fulcrum RE operates in the real-estate sector, providing brokerage, investment, and property-management services. Companies of this type routinely store client identification documents, mortgage and transaction records, lease agreements, and internal correspondence. A breach at such a firm is consequential because the records often contain both personal identifiers and details that can be used to impersonate individuals in financial transactions.

The information in question

The listing refers only to “internal files” and “all company data.” No inventory of specific file types or data fields has been published. Organisations in this sector commonly hold names, addresses, dates of birth, government identification numbers, bank details, and property ownership records. Whether any of these categories are present in the material claimed by incransom has not been confirmed.

What's at stake

Individuals whose records appear in the exfiltrated material could see their information used for identity fraud, account takeover attempts, or targeted phishing. Real-estate files can also reveal ownership stakes or financial arrangements that are otherwise private. For the organisation, the exposure may complicate client relationships and regulatory compliance obligations, though the precise impact depends on the contents of the files, which remain undisclosed.

Were you affected?

Because the number of individuals involved is unknown, the first practical step is to monitor official statements from Fulcrum RE. Anyone who has conducted business with the firm can request a copy of their records and ask what steps the company is taking. Running a free exposure scan of an email address against known breach repositories can show whether the address has appeared in previously published data sets; new listings may take time to surface in public trackers.

AICompiled with AI assistance from public sources and published under our editorial standards.