[INCRANSOM] – Ransomware Victim: evergreenpnw[.]com

image

Ransomware Group: INCRANSOM

VICTIM NAME: evergreenpnw[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the INCRANSOM Onion Dark Web Tor Blog page.


AI Generated Summary of the Ransomware Leak Page

The ransomware leak concerning Evergreen Christian Community, a company active in the Agriculture and Food Production sector, has been documented on a dark web page. According to the data extracted, the leak was discovered on February 22, 2025. Evergreen Christian Community, located in Olympia, Washington, is characterized as a religious organization employing between 100 to 249 individuals, with reported revenues ranging from $10 million to $25 million. The page details significant data breaches involving a total of 63,846 files, which accumulate to approximately 32.5 billion bytes. Despite no specific compromise date being stated, the detection date signifies a major concern for potential data exposure.

The extracted information suggests a noteworthy mention of various files and directories associated with the organization, indicating the scale of the data exposure. Additionally, the leak page indicates that there are no identifiable employees or third parties involved in the sensitive data sharing, suggesting a focused attack on the organization’s internal file systems. The presence of a screenshot indicates the visual representation of leaked information, further highlighting the malicious intent behind this data breach. Furthermore, the website linked in the disclosure relates directly to the organization’s domain, potentially increasing the risk of reputational damage and further exploitation in the digital landscape.


A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below

To keep up to date follow us on the below channels.