www.labexpress.com — Ransomware Incident Claimed by INC Ransom
- Victim: www.labexpress.com
- Claimed by INC Ransom
- Date claimed: 2026-05-30
- Country: US
- Sector: Business Services
A single AD domain serves both Labexpress and Garonit Pharma. Financial & Accounting - QuickBooks Enterprise 2021 installer and data files (QB2021.DSN, QB2021.ND). Quality & Production - Thousands of COA/COC files (e.g., CHG 20% Lot 429012 CoA.pdf, COC CHG 20%, Lot# 705103.docx). Tax & Banking Documentation - Correspondence with the IRS, State of New Jersey, Valley National Bank, Citibank. - Files: IRS Notice Lab Express.pdf, Valley Bank Garonit Deceember 2020.pdf, Credit Application, Bank instructions.pdf. - Cross-company records reside in the same folders (e.g., "Garonit Documents" and "LABEXPRESSDATA" coexist on the same drive). - Purchase orders, invoices, COA/COC files refer to both companies interchangeably. The obtained data demonstrates that Labexpress and Garonit Pharma operate on a single, shared IT infrastructure.