Ransomware Group intelligence

Dragonforce

Active

Track Dragonforce with 717 published victims and 4 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 717 Known published victims in this dataset
First discovered 2023-12-13 Earliest victim discovery date
Last discovered 2026-08-24 Latest victim discovery date
Inactive since 8 days Days since the latest known victim
Top country United States 325 victims
Known locations 4 Leak or negotiation infrastructure tracked

Overview

Dragonforce is tracked by Breach House as a ransomware group with 717 published victims.

United States is currently the most targeted country in this dataset.

4 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (4)

    Label Type Availability Links
    Leak location 2 Onion service Up checked 2h ago 3pktcrcbmssvrnwe5skburdwe2h3v6ibdnn5kbjqihsg6eu6s6b7ryqd.onion
    Leak location 1 Onion service Up checked 2h ago z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion
    Leak location 4 Onion service Down checked 2h ago dragongoztkdfmnd7jkchznd3fvkpdmeh4vhbt6p3usrlsoy5dw2bhyd.onion
    Leak location 3 Onion service Down checked 2h ago dragonforxxbp3awc7mzs5dkswrua3znqyx5roefmi4smjrsdi22xwqd.onion

    Top Activity Sectors (17)

    Victims (717)

    Search, filter and paginate the victim timeline for Dragonforce. Showing 1–100 of 717.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Frato id32081 View details Brazil IT
    Ransomware Frato id32081 View details Brazil IT
    Ransomware Criba id32082 View details Argentina Services
    Ransomware Criba id32082 View details Argentina Services
    Ransomware Brookview Financial id32079 View details Canada Finance / Legal / Insurance
    Ransomware Brookview Financial id32079 View details Canada Finance / Legal / Insurance
    Ransomware Wozair id32080 View details United Arab Emirates Manufacturing / Engineering
    Ransomware Wozair id32080 View details United Arab Emirates Manufacturing / Engineering
    Ransomware Hogan Omidi P.C. id31948 View details United States
    Ransomware R & D Machine and Engineering id31830 View details United States
    Ransomware Vermont XCenter id31786 View details Brazil
    Ransomware GB Group S.A id31664 View details Poland IT
    Ransomware GB Group S.A id31664 View details Poland IT
    Ransomware QPC Global id31562 View details United Kingdom IT
    Ransomware QPC Global id31562 View details United Kingdom IT
    Ransomware EduSpa id31370 View details Education
    Ransomware EduSpa id31370 View details Education
    Ransomware EduSpa id31370 View details United States Education
    Ransomware Primary Eye Care id31357 View details United States Healthcare / Pharma
    Ransomware Primary Eye Care id31357 View details United States Healthcare / Pharma
    Ransomware P. A. Inc. (Performance Alloys) id31291 View details United States Other
    Ransomware P. A. Inc. (Performance Alloys) id31291 View details United States Other
    Ransomware Mike Graham Heating And Air Conditioning id31292 View details United States Construction / Real Estate
    Ransomware Mike Graham Heating And Air Conditioning id31292 View details United States Construction / Real Estate
    Ransomware Baicizhan id31180 View details China Education
    Ransomware Baicizhan id31180 View details China Education
    Ransomware TUI China id31179 View details China Hospitality / Food & Beverage / Tourism
    Ransomware TUI China id31179 View details China Hospitality / Food & Beverage / Tourism
    Ransomware Lamont Pridmore id31082 View details United Kingdom Finance / Legal / Insurance
    Ransomware Lamont Pridmore id31082 View details United Kingdom Finance / Legal / Insurance
    Ransomware RUS Industrial id31079 View details United States Manufacturing / Engineering
    Ransomware RUS Industrial id31079 View details United States Manufacturing / Engineering
    Ransomware www.mbmlawsc.com id31080 View details United States Finance / Legal / Insurance
    Ransomware www.mbmlawsc.com id31080 View details United States Finance / Legal / Insurance
    Ransomware Katathani Phuket Beach Resort id30969 View details Thailand Hospitality / Food & Beverage / Tourism
    Ransomware Katathani Phuket Beach Resort id30969 View details Thailand Hospitality / Food & Beverage / Tourism
    Ransomware Syntron Bioresearch id30898 View details United States IT
    Ransomware Syntron Bioresearch id30898 View details United States IT
    Ransomware Deluxe Medical Supply id30899 View details United States Healthcare / Pharma
    Ransomware Deluxe Medical Supply id30899 View details United States Healthcare / Pharma
    Ransomware ID engineering id30823 View details Indonesia Manufacturing / Engineering
    Ransomware ID engineering id30823 View details Indonesia Manufacturing / Engineering
    Ransomware Koshkaryan Law Group id30743 View details United States Finance / Legal / Insurance
    Ransomware Koshkaryan Law Group id30743 View details United States Finance / Legal / Insurance
    Ransomware One Community FCU id30734 View details United States Finance / Legal / Insurance
    Ransomware One Community FCU id30734 View details United States Finance / Legal / Insurance
    Ransomware NewNet id30660 View details Saudi Arabia IT
    Ransomware NewNet id30660 View details Saudi Arabia IT
    Ransomware Petrini Valores id30611 View details Argentina
    Ransomware Petrini Valores id30611 View details Argentina
    Ransomware Sinai Grand Casino id30612 View details Egypt Hospitality / Food & Beverage / Tourism
    Ransomware Sinai Grand Casino id30612 View details Egypt Hospitality / Food & Beverage / Tourism
    Ransomware Kee Wah Bakery id30594 View details Hong Kong IT
    Ransomware Kee Wah Bakery id30594 View details Hong Kong IT
    Ransomware Southport Outdoor Living id30591 View details United Kingdom Retail / E-commerce
    Ransomware Southport Outdoor Living id30591 View details United Kingdom Retail / E-commerce
    Ransomware Metro Design Cente id30592 View details Mexico Retail / E-commerce
    Ransomware Metro Design Cente id30592 View details Mexico Retail / E-commerce
    Ransomware North Atlantic Engineering Consultants id30593 View details Botswana Transportation / Travel / Logistics
    Ransomware North Atlantic Engineering Consultants id30593 View details Botswana Transportation / Travel / Logistics
    Ransomware Heritage Mechanical LLC id30583 View details United States Construction / Real Estate
    Ransomware Heritage Mechanical LLC id30583 View details United States Construction / Real Estate
    Ransomware Isegen South Africa (Pty) Ltd id30577 View details South Africa Manufacturing / Engineering
    Ransomware Isegen South Africa (Pty) Ltd id30577 View details South Africa Manufacturing / Engineering
    Ransomware Hughes Atwood & Mullaly pllc id30578 View details United States Finance / Legal / Insurance
    Ransomware Hughes Atwood & Mullaly pllc id30578 View details United States Finance / Legal / Insurance
    Ransomware Shillen Mackall & Seldon id30579 View details United States NGOs / Associations
    Ransomware Shillen Mackall & Seldon id30579 View details United States NGOs / Associations
    Ransomware Stephens Precision id30580 View details United States Manufacturing / Engineering
    Ransomware Stephens Precision id30580 View details United States Manufacturing / Engineering
    Ransomware Edison Global Networks Limited id30548 View details United Kingdom Energy
    Ransomware Edison Global Networks Limited id30548 View details United Kingdom Energy
    Ransomware Edison Global Networks Limited id30548 View details Hong Kong Energy
    Ransomware SITAV SpA id30549 View details Italy Transportation / Travel / Logistics
    Ransomware SITAV SpA id30549 View details Italy Transportation / Travel / Logistics
    Ransomware Graphic International Centre id30550 View details United States IT
    Ransomware Graphic International Centre id30550 View details United States IT
    Ransomware Road Ahead Technologies Consultant id30551 View details China Transportation / Travel / Logistics
    Ransomware Road Ahead Technologies Consultant id30551 View details China Transportation / Travel / Logistics
    Ransomware Intron Technology Holdings id30542 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Intron Technology Holdings id30542 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Atcom id30543 View details China Telecommunications
    Ransomware Atcom id30543 View details China Telecommunications
    Ransomware Midal Cables id30544 View details United Arab Emirates Manufacturing / Engineering
    Ransomware Midal Cables id30544 View details United Arab Emirates Manufacturing / Engineering
    Ransomware Omax Autos id30545 View details India Manufacturing / Engineering
    Ransomware Omax Autos id30545 View details India Manufacturing / Engineering
    Ransomware Ifage id30546 View details Switzerland Education
    Ransomware Ifage id30546 View details Switzerland Education
    Ransomware asimar.com id30540 View details Mexico Other
    Ransomware asimar.com id30540 View details Mexico Other
    Ransomware momenta.cn id30537 View details China IT
    Ransomware momenta.cn id30537 View details China IT
    Ransomware Northeast Rescue Systems id30523 View details United States NGOs / Associations
    Ransomware Northeast Rescue Systems id30523 View details United States NGOs / Associations
    Ransomware Nicholson y Cano Abogados id30522 View details Argentina Finance / Legal / Insurance
    Ransomware Nicholson y Cano Abogados id30522 View details Argentina Finance / Legal / Insurance
    Ransomware degeremcia.com id30512 View details Türkiye Other
    Ransomware degeremcia.com id30512 View details Türkiye Other
    Ransomware www.twtci.com Trans World Trading id30513 View details IT