OSI Systems, Inc. Listed by incransom Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On 30 December 2025, the ransomware group incransom listed OSI Systems, Inc. on its leak site and stated that 250GB of internal files had been taken. The number of people whose information may be involved is not known. The listing asserts that the material includes references to government and commercial clients as well as project and financial records. No further details on the timing or method of the incident have been released.

What happened

The public record is limited to the group’s leak-site entry. It states that internal files were removed during a ransomware attack and that the total volume reached 250GB. The date of the intrusion, the entry point, and whether any of the material has been released to third parties remain undisclosed.

The group behind it: incransom

Incransom is a ransomware operation that has conducted multiple campaigns against organisations in various sectors. Its standard approach involves encrypting systems and copying data, then using a public leak site to list victims that have not met its demands. The listing of OSI Systems represents the group’s claim that it possesses material from the company; independent confirmation of the claim has not been published.

OSI Systems, Inc. and its sector

OSI Systems, Inc. designs and supplies security screening equipment and medical imaging systems. Its customers include government agencies and health-care providers that require equipment meeting regulatory and national-security standards. Entities in this sector commonly maintain technical drawings, test results, subcontractor lists, and contractual information whose exposure can affect both operational security and partner relationships.

What data was at risk

The listing describes internal files that contain client references, project documentation, and basic corporate records. The precise categories and volume of any personal data within those files have not been confirmed by the company.

The real-world impact

Individuals connected to the listed clients or projects may face an elevated risk of targeted phishing or social-engineering attempts if their contact details appear in the material. The organisation itself may experience strain on existing contracts and future procurement processes that depend on assurances of confidentiality for development and testing information.

What to do if you're exposed

People who have interacted with OSI Systems or its clients should watch for unusual account activity and treat unsolicited messages that reference the company with caution.

• Review statements and login records for any accounts associated with the organisation or its projects.
• Enable or strengthen multi-factor authentication on email and financial accounts.
• Keep records of any unexpected contact that mentions specific projects or clients named in public reporting.

Readers can run a free exposure scan of their email to check whether their information has surfaced in known breach data.

AICompiled with AI assistance from public sources and published under our editorial standards.