Home All Victims InCare Technologies

InCare Technologies

sarcoma

This record tracks a ransomware attack claimed by the sarcoma group against InCare Technologies. It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Breach House.

Window Zero

EXPOSURE GAP

Window Zero is the time the breach stayed in the open before anyone said so — the gap between when the attack was first discovered on the operator's leak site (t1) and when it was publicly disclosed (t2). The wider this window, the longer victims, staff and customers were exposed with no warning.

615days open
t1 · Published t2 · Pending
Oct 09, 2024Not disclosed yet
Country
United States
Business Category
IT
Employees
101-1000
Discovered
2024-10-09
Published
October 09, 2024
Disclosed / Notified
Not disclosed yet
Victim ID
2csjpqBoXzYs

Attack Summary

Our Story Thrive began in 2000 as a modest IT services firm in Concord, Massachusetts. The pioneering original founders believed no one wanted break/fix anymore and were one of the first companies in the world to create proactive managed services for the SMB market. Thrive has since become a global leader in cybersecurity, Cloud, and digital transformation Managed Services. The company was acquired by Staples in 2007, MetTel in 2014, and then recapitalized by Private Equity firm M/C Partners in 2016 and Court Square Capital in 2021, which ushered in a new era of resilience, growth, and industry leadership. Since 2017, Thrive has secured funding and expanded the company’s global footprint across North America, Europe, and the Asia-Pacific region through a steady march of over 20 strategic acquisitions. Our comprehensive end-to-end solutions, anchored by an unrivaled NextGen portfolio of managed cybersecurity and Cloud offerings, enable businesses to transform digitally and securely. Amid the success, Thrive has won awards for creating innovative, outsourced IT solutions to meet clients’ global technology requirements. Yet, our company’s true strength lies in our employees’ passion and dedication. Thrive’s diverse and talented team embodies a culture of collaboration, learning, teamwork, and continuous growth that powers our clients’ digital transformation journeys and delivers tremendous ROI. Thrive is not just a company; it’s a testament to what happens when a community of passionate individuals comes together to unleash the full potential of technology and human collaboration. Our story is one of continuous evolution, innovation, and a steadfast commitment to technology excellence on our customers’ behalf. Thrive can only be successful when our clients win, and we are just getting started.Geo: USA - Leak size: 161 GB Archive - Contains: Files, SQL

Leak Screenshots

SAMPLE

Proof-of-breach screenshots the operator posted from the stolen data. Previews are redacted and locked — the originals are available on HaveIBeenRansom.

file_tree.png
finance_2024.xlsx
passport_scan.jpg
contract_signed.pdf
Sign in or explore HaveIBeenRansom to view the full leak gallery.
View leak gallery →

Dark Web Exposure

Cross-referenced against HaveIBeenRansom's dark-web index of ransomware leaks, breaches & infostealer logs.
0
found in Infostealer logs
0
found in Traditional breaches
0
found in Ransomware leaks
Emails exposed
••••
Internal
•••
External
•••
Distinct leaks
••
••••••••••••••••••••••••
•••••••••• · ••••••
••• emails
••••••••••••••••••••••••
•••••••••• · ••••••
••• emails
••••••••••••••••••••••••
•••••••••• · ••••••
••• emails
••••••••••••••••••••••••
•••••••••• · ••••••
••• emails
Full exposure is locked
See every breached email, the internal-vs-external split and each leak source behind this victim.
Want the complete picture — passwords, machines, full leak files? It's all searchable on HaveIBeenRansom.
Search this victim →
Visit Website View Group: sarcoma
Legal Disclaimer: This ransomware victim record reflects information published on the operator's leak site. Breach.house does not acquire, download, host, access or redistribute unlawfully obtained data. It indexes only publicly visible information posted by ransomware, breach and infostealer operators and open web sources, without accessing the underlying stolen content. The service supports public awareness, legitimate research and cyber-resilience.