[Single source] Claim: INC Ransom lists travel retailer Avolta

DailyDarkWeb reports that INC Ransom added global travel retailer Avolta to its leak site. The reported listing includes neither sample files nor a data volume, and Avolta has not publicly confirmed an incident. For now, this is an unverified threat-actor claim, not proof of a breach.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

According to DailyDarkWeb, INC Ransom named Avolta on its data-leak site. The supplied evidence does not independently show the original listing, compromised files, affected systems or a statement from the retailer.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

Avolta is described as a Basel-based retailer operating duty-free and food outlets at airports worldwide. That footprint makes the allegation notable, but the post's suggestion that employee, supplier or loyalty-program information could be involved is hypothetical, not evidence that any such data was accessed.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

Treat the listing as an early warning rather than a confirmed breach. Customers, employees and partners should look for an official Avolta notice before assuming their information is involved, while remaining cautious about unexpected messages that exploit the allegation.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

The supplied post and its attached image are observable, and the post says the alleged listing contains no sample or data volume. Unknowns include whether Avolta was breached, what systems or information may be affected, when any intrusion occurred and whether INC Ransom possesses company data.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

DailyDarkWeb explicitly labels the report an unverified threat-actor claim and warns that it should not be treated as confirmation of a breach. The post also says Avolta has not publicly confirmed an incident.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

The available evidence captures only one stage: a report that Avolta appeared on INC Ransom's leak site without supporting samples or a stated volume. No later company response, publication of files or independent validation is included, so the allegation has not advanced to confirmation within this evidence set.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

1 independent groups, 1 updates, and 0 engagements.

DailyDarkWeb says INC Ransom typically claims to steal data before encrypting systems and then uses public listings to pressure victims. That description provides context for the alleged listing, but the supplied evidence contains no technical indicators, forensic findings or data samples tying such activity to Avolta.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list

The evidence set contains a single DailyDarkWeb post on X and an associated image. It offers a secondary account of an alleged leak-site listing, while providing no direct company statement, original threat-site record, sample data or independent technical corroboration.[1]DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list