Exclusive: INC demands ransom attack on Australian contractor Facade Innovations
A ransomware group says it stole 80 gigabytes of data from a New South Wales-based company, including customer and staff data.
Ransomware operation INC Ransom has struck Australian shores once again, this time listing commercial design and construction company Facade Innovations on its darknet leak site.
The hackers first listed the company on November 13 and gave an addendum to the leak post that provided alleged details about the type of data compromised in the incident.
You are out of free items for this month
According to INC Ransom, the total 80 gigabytes of data includes contracts, financial data, human resources information and customer data.
A day after adding the addendum, INC Ransom released the entire dataset, and it appears to largely match the hackers' claims. Work invoices, correspondence and contract details make up a majority of the data, including work carried out on behalf of the University of Sydney and the CSIRO.
Facade Innovations did not respond to Cyber Daily's request for comment.
The company is the second Australian victim of INC Ransom in recent days, after the hackers listed Queensland-based legal services firm Kelly Legal late last week. Unfortunately, Australian organizations are well represented among the group's 553 victims – there were 546 just a few days ago. Only organizations in the USA, Canada, Great Britain and Germany are more heavily targeted.
Arguably the most impactful local hack involved Sydney-based medical imaging company Spectrum Medical Imaging.
Spectrum was first listed by INC Ransom in January 2025. A month later, Spectrum began contacting patients, warning that their medical information may have been compromised.
INC Ransomware is known for using spear phishing tactics to gain first access and double extortion techniques to put pressure on its victims. INC Ransomware encrypts the stolen data and then threatens to publish that data online if a ransom payment is not received.

David Hollingworth
David Hollingworth has been writing about technology for over 20 years and has worked for a range of print and online titles throughout his career. He enjoys learning about cybersecurity, especially when he can talk about Lego.