Skip to content Dark Web Informer - Cyber Threat Intelligence

ICM Document Solutions Falls Victim to Kawa4096 Ransomware

📢 Unlock Exclusive Cyber Threat Intelligence

Powered by DarkWebInformer.com

Get foundational access to breach intelligence — track breaches, leaks, and threats in real-time with unfiltered screenshots and expert summaries.

📚
4,000+ Blog Posts: Continuously updated with breach reports and threat summaries.
📢
26,000+ Alerts: Access detailed breach, leak, and DDoS alerts updated daily.
📤
Unredacted Threat Feed: Track breaches and leaks in real-time with JSON export support.
🔍
Leak & Breach Coverage: Get direct access to breach posts and claims.
📡
Snippets & Quick Facts: Receive concise summaries of DDoS, defacements, and breaches.
🌐
Access 500+ Onion and Clearnet Resources: Gain verified access to a growing index of dark web sites and services.
📊
Real-Time Uptime Dashboard: Monitor live status of 500+ dark web and clearnet sites.
🤖
WhiteIntel.io API Access: Access an integrated API, in breach blog posts.
🖼️
High-Resolution Images: View uncompressed, watermark-free breach evidence.
🔑
Keyword Notifications: Receive browser alerts when monitored keywords are triggered.
👥
Telegram Channels: Stay in the know with access to different Telegram channels.
📨
PGP Contact Details: Access verified PGPs for ransomware and threat groups.

About ICM Document Solutions

ICM Document Solutions (ICM) is a second-generation, family-owned business based in the United States. Founded in 1988 (formerly Image Conversions & Management), ICM specializes in converting business records, technical manuals, engineering drawings, and other sensitive client materials into secure, digital formats.

The company provides end-to-end document management solutions, including:

  • Scanning and digital conversion services
  • Data management and IT support
  • Implementation of their proprietary ViewCenter Document Management Suite

ICM serves clients ranging from small businesses to large enterprises, offering long-term document governance and compliance solutions.


⚠ Disclaimer

This report includes actual screenshots and/or text that may contain unredacted personally identifiable information (PII). Dark Web Informer explicitly condemns unauthorized access, distribution, or misuse of such data. All data shared is for cybersecurity awareness and threat intelligence purposes only.


📌 Overview

On June 19, 2025, the ransomware group Kawa4096 initially listed an unidentified victim under the placeholder domain ******.com.

On July 22, 2025, the threat actor confirmed the victim as ICM Document Solutions (icmconv.com) and made 21GB of company data publicly available for download on their dark web portal.


📊 Key Details

AttributeInformation
Date2025-07-22, 3:11:08 AM
Threat ActorKawa4096
Victim Country🇺🇸 USA
IndustrySoftware Development / Document Services
Victim Org.ICM Document Solutions
Victim Siteicmconv.com
CategoryRansomware
SeverityMedium
NetworkTor

Subscriber-only content…

This post is for subscribers on the Pro tier

Subscribe

Already have an account? Sign In

Latest