Ransomware Group intelligence

Dragonforce

Active

Track Dragonforce with 668 published victims and 3 known leak locations in a single intelligence view.

Victims 668 Known published victims in this dataset
First discovered 2023-12-13 Earliest victim discovery date
Last discovered 2026-07-16 Latest victim discovery date
Inactive since 2 days Days since the latest known victim
Top country United States 304 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Dragonforce is tracked by Breach House as a ransomware group with 668 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion
    Leak location 2 Onion service Unknown 3pktcrcbmssvrnwe5skburdwe2h3v6ibdnn5kbjqihsg6eu6s6b7ryqd.onion
    Leak location 3 Onion service Unknown dragonforxxbp3awc7mzs5dkswrua3znqyx5roefmi4smjrsdi22xwqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (668)

    Search, filter and paginate the victim timeline for Dragonforce. Showing 1–100 of 668.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Petrini Valores id30611 View details Argentina
    Ransomware Petrini Valores id30611 View details Argentina
    Ransomware Sinai Grand Casino id30612 View details Egypt Hospitality / Food & Beverage / Tourism
    Ransomware Sinai Grand Casino id30612 View details Egypt Hospitality / Food & Beverage / Tourism
    Ransomware Kee Wah Bakery id30594 View details Hong Kong IT
    Ransomware Kee Wah Bakery id30594 View details Hong Kong IT
    Ransomware Southport Outdoor Living id30591 View details United Kingdom Retail / E-commerce
    Ransomware Southport Outdoor Living id30591 View details United Kingdom Retail / E-commerce
    Ransomware Metro Design Cente id30592 View details Mexico Retail / E-commerce
    Ransomware Metro Design Cente id30592 View details Mexico Retail / E-commerce
    Ransomware North Atlantic Engineering Consultants id30593 View details Botswana Transportation / Travel / Logistics
    Ransomware North Atlantic Engineering Consultants id30593 View details Botswana Transportation / Travel / Logistics
    Ransomware Heritage Mechanical LLC id30583 View details United States Construction / Real Estate
    Ransomware Heritage Mechanical LLC id30583 View details United States Construction / Real Estate
    Ransomware Isegen South Africa (Pty) Ltd id30577 View details South Africa Manufacturing / Engineering
    Ransomware Isegen South Africa (Pty) Ltd id30577 View details South Africa Manufacturing / Engineering
    Ransomware Hughes Atwood & Mullaly pllc id30578 View details United States Finance / Legal / Insurance
    Ransomware Hughes Atwood & Mullaly pllc id30578 View details United States Finance / Legal / Insurance
    Ransomware Shillen Mackall & Seldon id30579 View details United States NGOs / Associations
    Ransomware Shillen Mackall & Seldon id30579 View details United States NGOs / Associations
    Ransomware Stephens Precision id30580 View details United States Manufacturing / Engineering
    Ransomware Stephens Precision id30580 View details United States Manufacturing / Engineering
    Ransomware Edison Global Networks Limited id30548 View details United Kingdom Energy
    Ransomware Edison Global Networks Limited id30548 View details United Kingdom Energy
    Ransomware SITAV SpA id30549 View details Italy Transportation / Travel / Logistics
    Ransomware SITAV SpA id30549 View details Italy Transportation / Travel / Logistics
    Ransomware Graphic International Centre id30550 View details United States IT
    Ransomware Graphic International Centre id30550 View details United States IT
    Ransomware Road Ahead Technologies Consultant id30551 View details China Transportation / Travel / Logistics
    Ransomware Road Ahead Technologies Consultant id30551 View details China Transportation / Travel / Logistics
    Ransomware Intron Technology Holdings id30542 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Intron Technology Holdings id30542 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Atcom id30543 View details China Telecommunications
    Ransomware Atcom id30543 View details China Telecommunications
    Ransomware Midal Cables id30544 View details United Arab Emirates Manufacturing / Engineering
    Ransomware Midal Cables id30544 View details United Arab Emirates Manufacturing / Engineering
    Ransomware Omax Autos id30545 View details India Manufacturing / Engineering
    Ransomware Omax Autos id30545 View details India Manufacturing / Engineering
    Ransomware Ifage id30546 View details Switzerland Education
    Ransomware Ifage id30546 View details Switzerland Education
    Ransomware asimar.com id30540 View details Mexico Other
    Ransomware asimar.com id30540 View details Mexico Other
    Ransomware momenta.cn id30537 View details China IT
    Ransomware momenta.cn id30537 View details China IT
    Ransomware Northeast Rescue Systems id30523 View details United States NGOs / Associations
    Ransomware Northeast Rescue Systems id30523 View details United States NGOs / Associations
    Ransomware Nicholson y Cano Abogados id30522 View details Argentina Finance / Legal / Insurance
    Ransomware Nicholson y Cano Abogados id30522 View details Argentina Finance / Legal / Insurance
    Ransomware degeremcia.com id30512 View details Türkiye Other
    Ransomware degeremcia.com id30512 View details Türkiye Other
    Ransomware www.twtci.com Trans World Trading id30513 View details IT
    Ransomware www.twtci.com Trans World Trading id30513 View details IT
    Ransomware www.twtci.com Trans World Trading id30513 View details Philippines IT
    Ransomware Al - Saidi Factory id30505 View details Saudi Arabia Other
    Ransomware Al - Saidi Factory id30505 View details Saudi Arabia Other
    Ransomware STEP Oiltools id30506 View details Romania Energy
    Ransomware STEP Oiltools id30506 View details Romania Energy
    Ransomware Access Equipment Hire id30499 View details Australia IT
    Ransomware Access Equipment Hire id30499 View details Australia IT
    Ransomware The Schuett Companies id30465 View details United States Healthcare / Medicine
    Ransomware The Schuett Companies id30465 View details United States Healthcare / Medicine
    Ransomware hive360.com id30309 View details United States IT
    Ransomware hive360.com id30309 View details United States IT
    Ransomware amplesurveyor.com id30310 View details United States IT
    Ransomware amplesurveyor.com id30310 View details United States IT
    Ransomware hwaseng id30085 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware hwaseng id30085 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware agroprime id30086 View details Brazil Agriculture / Food
    Ransomware agroprime id30086 View details Brazil Agriculture / Food
    Ransomware stni.co.kr id30087 View details Korea, Republic of Manufacturing / Engineering
    Ransomware stni.co.kr id30087 View details Korea, Republic of Manufacturing / Engineering
    Ransomware vipimaging id30088 View details United States Healthcare / Medicine
    Ransomware vipimaging id30088 View details United States Healthcare / Medicine
    Ransomware medipakpharma.com id30090 View details Pakistan Healthcare / Pharma
    Ransomware medipakpharma.com id30090 View details Pakistan Healthcare / Pharma
    Ransomware Aptora id30047 View details United States IT
    Ransomware Aptora id30047 View details United States IT
    Ransomware bits-pilani.ac.in id30081 View details India Education
    Ransomware mihana-v.com id30082 View details Russian Federation IT
    Ransomware Tecfi SpA id29941 View details Italy IT
    Ransomware Ink id29861 View details United Kingdom Communication / Marketing
    Ransomware Cheoy Lee Shipyards id29822 View details Hong Kong Other
    Ransomware Al Ishrak Contracting id29823 View details United Arab Emirates Other
    Ransomware Corniche Hotel Abu Dhabi id29827 View details United Arab Emirates Hospitality / Food & Beverage / Tourism
    Ransomware A. Liberty Engineering Co. Ltd id29829 View details Hong Kong Manufacturing / Engineering
    Ransomware Al Shafar GRC id29830 View details United Arab Emirates Services
    Ransomware The DRM id29831 View details Bahrain Retail / E-commerce
    Ransomware Areco id29794 View details Sweden IT
    Ransomware Hong Kong Parkview id29802 View details Hong Kong Construction / Real Estate
    Ransomware Astec Valves & Fittings Pvt id29803 View details India Manufacturing / Engineering
    Ransomware Cekok id29804 View details Türkiye Manufacturing / Engineering
    Ransomware Brian Cox id29805 View details United Kingdom Other
    Ransomware Sayre Associates id29726 View details United States Finance / Legal / Insurance
    Ransomware REHA-ACTIV id29647 View details Germany Healthcare / Medicine
    Ransomware Copamex id29590 View details Mexico Manufacturing / Engineering
    Ransomware SETS Solutions id29591 View details Lebanon IT
    Ransomware Synex International Pvt Ltd id29544 View details Sri Lanka Energy
    Ransomware Taos Mountain Casino id29546 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Panorama BPO id29547 View details Philippines Finance / Legal / Insurance
    Ransomware Shoreline Sightseeing id29391 View details United States Construction / Real Estate