Infonet Media d.o.o. Listed by incransom Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

The listing of Infonet Media d.o.o. by the incransom ransomware group on April 3, 2026, indicates that internal files were removed from the company’s systems during a ransomware incident. The number of individuals whose information may be involved remains unknown, and the precise contents of the exfiltrated material have not been disclosed. For listeners, advertisers, and partners connected to Slovenian radio stations, the event raises the possibility that operational records held by one of the country’s larger broadcast networks could become accessible outside the organisation.

What happened

Infonet Media d.o.o. was added to a listing maintained by the incransom group on 3 April 2026. The group states that internal files were taken from the company during a ransomware operation. No further details on the timing of the intrusion, the volume of data removed, or the method of access have been made public. The organisation has not confirmed the incident or provided additional information about its scope.

Who is incransom?

Incransom is a ransomware operation that conducts encryption-based attacks and removes copies of data before demanding payment. The group maintains an online listing where it publishes names of organisations it claims to have targeted. Such listings are presented by the actors themselves and are not independently verified at the time of publication. The group’s activity follows patterns observed in other ransomware operations that combine file encryption with the threat of data release.

Who is Infonet Media d.o.o.?

Infonet Media d.o.o. is a media company based in Slovenia that operates one of the larger radio networks in the country. It manages several stations, including Radio 1 and Radio Antena, and produces content for national and regional audiences. The firm also conducts advertising sales and partnership campaigns. As a broadcaster, it maintains systems that support content production, audience data, and commercial relationships.

What was likely exposed

The only information released states that internal files were removed. The specific categories of data contained in those files have not been identified. Organisations of this type commonly hold records related to programming, advertising contracts, listener correspondence, and internal communications, yet the exact composition of the material allegedly taken from Infonet Media remains unconfirmed.

What's at stake

Exposure of internal files from a radio network can affect commercial arrangements, production schedules, and contact information held by the company. Individuals whose details appear in such records may face increased risk of targeted messages or misuse of contact data. For the organisation, the incident adds operational disruption and the need to review access controls and data-handling practices. No confirmed instances of subsequent misuse have been reported at this stage.

Were you affected?

Because the number of individuals involved and the nature of the files are not known, it is not possible to determine exposure from public statements alone. People can review their email addresses against publicly indexed breach data through established free scanning services. Additional steps include monitoring bank and email accounts for unusual activity and using unique passwords for different services. Organisations that hold personal information are expected to notify affected individuals directly when required by applicable regulations.

AICompiled with AI assistance from public sources and published under our editorial standards.