[img] https://encrypted-tbn0.gstatic.com/image...QzqPTW1RaS [/img]
InCare Technologies Has Been Breached. 2026
This is our first major operation, and we’re making it count. We’ve successfully infiltrated InCare Technologies’ core infrastructure, proving that their security still isn’t as impenetrable as they’d like you to believe.
The Vulnerability:
We exploited a critical Remote Code Execution (RCE) vulnerability in Apache Struts 2, specifically targeting the JSON plugin’s default type converter. While many enterprises patched the initial wave of Struts vulnerabilities years ago, InCare’s legacy healthcare management portal was running an outdated build (v2.5.x) where the
InCare Technologies Has Been Breached. 2026
This is our first major operation, and we’re making it count. We’ve successfully infiltrated InCare Technologies’ core infrastructure, proving that their security still isn’t as impenetrable as they’d like you to believe.
The Vulnerability:
We exploited a critical Remote Code Execution (RCE) vulnerability in Apache Struts 2, specifically targeting the JSON plugin’s default type converter. While many enterprises patched the initial wave of Struts vulnerabilities years ago, InCare’s legacy healthcare management portal was running an outdated build (v2.5.x) where the
com.opensymphony.xwork2.util.TextParseUtil.translateVariables
method remained vulnerable to OGNL injection. This allowed us to execute arbitrary system commands via crafted HTTP headers without authentication, granting us full administrative access to the web server layer before pivoting deeper into the internal network.
What’s Inside:
We have full access to their sensitive data stores. Included in our hold:
Customer and Client Information: Names, physical addresses, email addresses, and phone numbers.
Employee and Corporate Records: Internal communications, administrative documents, HR/payroll files, and business operations data.
Credentials and Access Data: Usernames, employee login credentials, system passwords, and network access keys.
Financial and Payment Records: Service plans, billing details, and payment or transaction histories managed through client IT systems.
End-Client / Patient Data: Depending on which client networks or managed accounts an IT provider like InCare serviced, sensitive healthcare or business records belonging to downstream clients are also exposed.
The Demand:
We are demanding $50,000 BTC from InCare Technologies for the safety of their data and customers.
If we don’t hear back from an authorized representative within 72 hours, the entire dataset goes public.
Anyone interested can message us, you do not have to pay $50,000 only InCare does. Message @resituated for samples. Selling To FracturedDB Members For just $700. InCare you can stop this.
TOX: 543C6584D03BD93CD8AFAE250FC0693F2EFD10CD49DE9B8D602DBF23FC937405E4BC993CEEB1
Samples:
method remained vulnerable to OGNL injection. This allowed us to execute arbitrary system commands via crafted HTTP headers without authentication, granting us full administrative access to the web server layer before pivoting deeper into the internal network.
What’s Inside:
We have full access to their sensitive data stores. Included in our hold:
Customer and Client Information: Names, physical addresses, email addresses, and phone numbers.
Employee and Corporate Records: Internal communications, administrative documents, HR/payroll files, and business operations data.
Credentials and Access Data: Usernames, employee login credentials, system passwords, and network access keys.
Financial and Payment Records: Service plans, billing details, and payment or transaction histories managed through client IT systems.
End-Client / Patient Data: Depending on which client networks or managed accounts an IT provider like InCare serviced, sensitive healthcare or business records belonging to downstream clients are also exposed.
The Demand:
We are demanding $50,000 BTC from InCare Technologies for the safety of their data and customers.
If we don’t hear back from an authorized representative within 72 hours, the entire dataset goes public.
Anyone interested can message us, you do not have to pay $50,000 only InCare does. Message @resituated for samples. Selling To FracturedDB Members For just $700. InCare you can stop this.
TOX: 543C6584D03BD93CD8AFAE250FC0693F2EFD10CD49DE9B8D602DBF23FC937405E4BC993CEEB1
Samples: