THREAT WATCH · October 16, 2026 · RANSOMWARE LISTING

exo.inc Listed on SETTRA Ransomware Tracker

exo.inc appears on a ransomware tracker associated with the SETTRA group. The listing was recorded on October 16, 2026. exo.inc is a United States company in the IT sector with 51 to 100 employees. Its domain is exo.inc. The disclosure status is not disclosed yet. A tracker listing is a strong signal, but it is not a confirmed breach. Intel128 treats it as an early warning and will update this post if the status changes.

Key takeaways

• exo.inc appears on the SETTRA tracker as of October 16, 2026.
• The company is a US IT firm with 51-100 employees.
• No disclosure has been made yet.
• A listing is a signal, not a confirmed breach.

Listing details

• Organization: exo.inc
• Domain: exo.inc
• Ransom group: SETTRA
• Listing date: October 16, 2026
• Country: United States
• Sector: IT
• Company size: 51-100 employees
• Disclosure status: Not disclosed yet

What this means

A listing means exo.inc appears on an attacker-side ransomware tracker. It does not confirm that systems were breached, that data was taken, or that a ransom demand was made. It does mean the organization has drawn attention from a known ransomware group. For customers and partners, the main value is early awareness rather than confirmed impact.

What remains unknown

No breach confirmation is available. No disclosure has been made. No details about affected systems, data, or business impact are available in the current record. Intel128 has not verified any compromise beyond the listing itself. Any statement about scope, cause, or outcome would go beyond the verified facts.

Why executives should care

IT sector organizations often hold access to customer systems, internal data, and operational tools. A listing involving a company with 51 to 100 employees can still affect customers, partners, and service continuity. Early awareness allows teams to review exposure, check vendor relationships, and prepare communications before any disclosure appears.

Next steps for readers

• Treat the listing as a signal, not proof of a breach.
• Monitor for any future disclosure from exo.inc.
• Review third-party and vendor exposure if exo.inc is in your supply chain.
• Keep incident response and communication plans ready in case the disclosure status changes.

Intel128 will continue to track this listing and update the record if new verified facts become available.

SOURCE: INTEL128 THREAT INTELLIGENCE FEED (UPDATED OCT 17, 2026). A listing is a record on an attacker-side ransomware tracker - strong signal, not a confirmed breach. Intel128 publishes what the feed shows and no more.