Ransomware Group: INCRANSOM

VICTIM NAME: ehdd[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the INCRANSOM Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page concerning EHDD, a technology-focused firm based in the US, suggests a data breach that showcases the compromise of sensitive information. Founded in 1946 and headquartered in San Francisco, EHDD specializes in designing built environments for a diverse range of sectors, including aquariums, museums, education, and corporate offices. The firm is recognized as a Top 10 AIA COTE honoree, reflecting its commitment to enhancing culture and honoring the natural environment through innovative design approaches. The leak page was published on February 20, 2025, following its discovery earlier the same day.

According to the information extracted from the leak, there are indications of users associated with EHDD being compromised, with a total of four users identified. However, no employees or third-party entities have been noted as affected. The leak page includes a screenshot that may display relevant information, although the details are not explicitly provided. Additionally, download links are present on the page, suggesting that some data may have been made accessible. As such, stakeholders should remain vigilant and consider preventive measures to safeguard sensitive data in the wake of this breach.