[Single source] Claim: INC Ransom lists Raymond James on leak site

A threat-intelligence account reports that INC Ransom listed Raymond James Financial on its data-leak site. The reported listing contains no data sample or volume, and the post says Raymond James has not publicly confirmed an incident. For now, this is an unverified extortion claim, not proof of a breach.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

DailyDarkWeb says INC Ransom added the investment bank and wealth manager to its leak site. According to the account, the entry describes the firm but provides no files, screenshots of stolen records, or stated amount of data that could substantiate the claim.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

If the claim proves genuine, an incident involving a wealth manager could put client account or identity information at risk and make targeted phishing more convincing. The available evidence does not establish that such information was accessed or stolen.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

Clients and staff should be cautious with unexpected messages about accounts, documents, payments, or identity verification. Use known contact channels rather than links or phone numbers supplied in unsolicited messages, while waiting for verified information from Raymond James.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

The evidence establishes that DailyDarkWeb published the warning and included an image attributed to the alleged listing. It does not independently establish a network intrusion, encryption event, data theft, ransom demand, affected systems, exposed records, incident date, or attribution to INC Ransom.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

DailyDarkWeb explicitly characterizes the entry as an unverified threat-actor claim and warns readers not to treat it as confirmation of a breach. The account also says Raymond James had not publicly confirmed an incident when the post was published.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

The reported Raymond James entry appeared as part of what DailyDarkWeb describes as a batch of more than 25 victims added by INC Ransom on the same day. That timing provides context for the post but does not make any individual claim more reliable.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

1 independent groups, 1 updates, and 0 engagements.

DailyDarkWeb describes INC Ransom as using double extortion, a model in which operators allegedly steal data before encrypting systems and then use both disruption and threatened publication as leverage. Nothing in the supplied evidence shows that either step occurred at Raymond James.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

This report rests on one DailyDarkWeb post and its attached image. There is no company statement, regulator notice, forensic report, leak sample, or independent corroboration in the supplied evidence, so the central claim remains unverified.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list