Tract Consulting Listed by incransom Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Tract Consulting Inc., a firm based in St. John's, Newfoundland and Labrador, was listed on February 27, 2026, by the incransom ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The number of people affected remains unknown, and no further details on the volume or contents of any data have been made public. The incident is significant because Tract Consulting provides professional services to municipalities and other organizations. Any confirmed exposure of internal project files could affect planning documents or client communications that are not ordinarily public.

Breaking down the breach

Public information is limited to the group's listing of Tract Consulting and the assertion that internal files were taken. No independent confirmation of the exfiltration, the date of the intrusion, or the method used has been released. The scale of the operation and whether any data has been published remain undisclosed.

The group behind it: incransom

Incransom is a ransomware operator that lists victim organizations on a leak site and states an intention to release material if demands are not met. In this case the group claims that files from Tract Consulting will be published within one week. Such groups commonly combine encryption of systems with the removal of data to create leverage, though the specific tactics used against Tract Consulting have not been detailed.

Tract Consulting and its sector

Tract Consulting Inc. is described as an award-winning practice with more than 25 years of experience in landscape architecture, urban planning, and civil engineering. Its work centers on community place-based design and asset management for municipalities and other clients undertaking urban improvement projects. Organizations in this sector routinely handle project specifications, site assessments, correspondence with public bodies, and internal administrative records.

What was likely exposed

The only data category named in available reports is internal files exfiltrated in a ransomware attack. The precise nature of those files has not been disclosed. Firms of this type typically maintain design documents, planning submissions, client contact details, and operational records; however, whether any of these categories are present in the claimed exfiltration cannot be confirmed from current information.

What's at stake

If internal files contain identifiable information about individuals or confidential project details, affected parties could face privacy or commercial consequences. For the organization, the incident may involve costs related to investigation, system restoration, and any regulatory notifications required under applicable Canadian privacy legislation. The absence of confirmed data volumes makes the scope of these risks difficult to quantify at present.

Were you affected?

Individuals who have corresponded with Tract Consulting or participated in projects it has managed can monitor official statements from the firm. A practical first step is to review any recent communications for unusual requests and to change passwords on accounts that may have been shared during project work. Readers may also run a free exposure scan of their email address against known breach data sets to check for prior appearances of their information.

AICompiled with AI assistance from public sources and published under our editorial standards.