www.reliablecontrols.com Listed by incransom Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target manufacturers and industrial technology firms, using data theft as leverage even when systems themselves are not fully encrypted. In that landscape, the appearance of a Canadian building-controls company on a ransomware leak site is a reminder that operational technology suppliers sit in the same crosshairs as better-known enterprise targets.

On 22 July 2025 the group known as incransom listed www.reliablecontrols.com, claiming that internal files had been exfiltrated in a ransomware attack. Public detail remains limited: the number of people affected is unknown, and no further technical description of the intrusion has been released. The listing itself is an unverified claim by the group.

Breaking down the breach

According to the available record, the incident was reported on 22 July 2025. The sole concrete assertion is that internal files were exfiltrated during a ransomware attack and that the organisation was subsequently listed by incransom. No public statement has confirmed the volume of data taken, the precise date of initial access, the attack vector, or whether encryption of systems occurred alongside the theft. The number of individuals whose information may have been involved is listed as unknown. Beyond the group’s leak-site claim, independent verification of the scope or success of the attack has not been published.

Who is incransom?

Incransom is a ransomware operation that follows the now-common double-extortion model: operators claim to steal data before or instead of encrypting systems, then threaten to publish the material on a dedicated leak site if a ransom is not paid. Like other groups in this category, it maintains a public listing page where victim organisations appear, often accompanied by sample files or countdown timers. Public reporting on the group has documented prior claims against companies in manufacturing, logistics and professional services, though each listing remains a claim until corroborated by the victim or by independent forensic evidence. In the present case the group asserts that internal files belonging to Reliable Controls were taken; that assertion has not been independently confirmed in the available record.

Who is www.reliablecontrols.com?

Reliable Controls, founded in 1986 and based in Canada, designs and manufactures building-control products used in distributed control systems. These systems manage heating, ventilation, air-conditioning, lighting and related building functions for commercial, institutional and industrial facilities. Organisations of this type typically hold engineering drawings, firmware source or binaries, customer project files, supplier contracts, employee records and internal correspondence. Because their products sit inside the operational technology of many buildings, a compromise can raise concerns not only about corporate data but also about the integrity of systems that control physical environments. The company’s listing by a ransomware group therefore carries potential consequences for both its own operations and the wider ecosystem of building-automation customers.

What data was at risk

The only data type named in the public record is “internal files exfiltrated in ransomware attack.” No further inventory—such as customer lists, employee personal information, source code or financial records—has been disclosed. Companies that design and manufacture building-control hardware and software commonly store design documentation, configuration databases, support tickets and personnel data. Whether any of those categories were among the files claimed by incransom remains unconfirmed. Until the organisation or an independent investigation releases a more detailed accounting, the precise contents of the exfiltrated material cannot be stated as fact.

The real-world impact

For individuals whose information may have been inside the stolen files, the immediate risks are the usual ones associated with corporate data theft: possible exposure of contact details, employment information or project-related correspondence that could be used for phishing or social-engineering attempts. For the organisation itself, the consequences include potential disruption of product-support operations, reputational damage among customers who rely on its control systems, and the cost of forensic investigation and remediation. Because the products interface with physical building infrastructure, any later discovery that configuration data or credentials were among the files would raise additional questions about the security of installed systems. At present those possibilities remain speculative; the public record does not confirm which files were taken or whether any have been published.

Were you affected?

If you are a current or former employee, customer or partner of Reliable Controls, treat the listing as a prompt to review your own exposure rather than as proof that your data was taken. Practical first steps include:

• Monitor financial and email accounts for unexpected activity or phishing messages that reference the company.
• Change passwords used for any Reliable Controls portals or related services, preferably enabling multi-factor authentication where available.
• Request a free exposure scan of your email address against known breach data sets to see whether your information has already appeared in other incidents.
• Retain any official notification you may later receive from the company; such notices usually contain the most accurate description of what was involved.

Public detail on this incident is still limited. Further clarity will depend on statements from Reliable Controls or on independent analysis of any material the group may eventually release.

AICompiled with AI assistance from public sources and published under our editorial standards.