Ransomware victim disclosure
← All victimsColina Financial Advisors
Claimed by INC Ransom · listed 4 hours ago
Status timeline
- Listed
Jun 4, 2026
Current state: Listed for ransom
At a glance
- Group
- INC Ransom
- Status
- Listed for ransom
- Country
- BS
- Sector
- Financial Services
- Listed on leak site
- Jun 4, 2026
- Data size
- 500 GB
About the victim
AI dossier — public-source company profileColina Financial Advisors Limited (CFAL) is an independent wealth management and investment advisory firm established in 1997 in Nassau, The Bahamas. It serves as the investment arm of Colina Holdings Ltd. and provides diverse financial services to individual and institutional clients.
- Industry
- Wealth Management & Investment Advisory
- Address
- Nassau, The Bahamas
- Founded
- 1997
Attack summary
Severity: critical — Confirmed exfiltration of 500 GB including regulated financial data, client PII, and sensitive asset information from a financial services firm. Regulatory/compliance records also exposed. 14 proof files advertised.INC Ransom claims to have encrypted systems and exfiltrated approximately 500 GB of highly confidential data, including client PII, financial profiles, asset data, business intelligence, estate planning documents, and regulatory compliance records.
Data the group says was taken
AI dossier — extracted from the leak post- Client Personally Identifiable Information (PII)
- Client Financial Profiles & Asset Data
- Proprietary Business Intelligence & System Data
- Estate & Legal Planning Documents
- Regulatory & Compliance Records
The group's post references roughly 14 proof files.
What the group claims
Colina Financial Advisors Limited (CFAL) is a prominent, independent wealth management and investment advisory firm based in Nassau, The Bahamas. Established in 1997, it serves as the investment arm of Colina Holdings Ltd. The firm provides diverse financial services to both individual and institutional clients. Senior executives are allegedly covering up a major data breach involving approximately 500 GB of highly confidential data.
The leak post
captured from the group's site```
{"type":true,"message":"Success: got announcements.","payload":{"length":718,"announcements":[{"_id":"6a20239dd152110a6a17aa7e","company":{"company_name":"Colina%20Financial%20Advisors","country":"BS","revenue":7900000},"categories":["Encrypted","Proof"],"description":["Colina%20Financial%20Advisors%20Limited%20(CFAL)%20is%20a%20prominent%2C%20independent%20wealth%20management%20and%20investment%20advisory%20firm%20based%20in%20Nassau%2C%20The%20Bahamas.%20Established%20in%201997%2C%20it%20serves%20as%20the%20investment%20arm%20of%20Colina%20Holdings%20Ltd..%20The%20firm%20provides%20diverse%20financial%20services%20to%20both%20individual%20and%20institutional%20clients.%0D","%0D","While%20customers%20continue%20to%20entrust%20the%20company%20with%20their%20money%2C%20senior%20executives%20are%20actively%20working%20to%20cover%20up%20a%20major%20data%20breach%20involving%20approximately%20500%20GB%20of%20highly%20confidential%20data.%0D","The%20leak%20includes%2C%20but%20is%20not%20limited%20to%3A%0D","1.%20Client%20Personally%20Identifiable%20Information%20(PII)%0D","2.%20Client%20Financial%20Profiles%20%26%20Asset%20Data%0D","3.%20Proprietary%20Business%20Intel%20%26%20System…Data the group says was taken
- Client PII
- Client Financial Profiles & Asset Data
- Proprietary Business Intel & System Data
- Holistic Estate & Legal Planning
- Regulatory & Compliance Records
Screenshot of the leak post
Sources
Source
Indexed 4 hours agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
Is this your supplier? Your competitor? You?
Pro plans monitor your domain, corporate emails, and crypto wallets across every new ransomware leak-site post, breach dump and Telegram callout — alerts within 5 minutes.