Distinctive Systems Confirms Cyberattack by INC Ransom, No Australian Data Impacted UK-based software provider Distinctive Systems, which specializes in management software for coach, bus, and tour operators, is investigating a cyberattack after being listed as a victim by the INC Ransom hacking group on 29 January 2026. The ransomware gang falsely claimed the company was Australian a misstatement echoed by some open-source ransomware trackers though Distinctive Systems confirmed that no Australian customer data was compromised. The company first detected the incident on 19 January 2026 and immediately engaged external cybersecurity experts to secure its systems. A spokesperson stated that forensic investigations have so far found no evidence of personal data exposure related to its Australian operations. Distinctive Systems has also made all necessary notifications regarding the breach. INC Ransom, a ransomware-as-a-service (RaaS) group active since August 2023, has claimed 649 victims to date, ranking among the most prolific ransomware operations. The group employs spear-phishing for initial access and double extortion, stealing data before encrypting it to pressure victims into paying ransoms. If demands are not met, stolen data is published on darknet leak sites or sold to other threat actors. While INC Ransom has targeted 17 Australian organizations over the years, Distinctive Systems’ Australian operations remain unaffected. The group’s most recent Australian victim was Avenira, a West Australian mining company, added to its leak site in December 2025.