Ransomware Group intelligence

Dragonforce

Active

Track Dragonforce with 717 published victims and 4 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 717 Known published victims in this dataset
First discovered 2023-12-13 Earliest victim discovery date
Last discovered 2026-08-24 Latest victim discovery date
Inactive since 8 days Days since the latest known victim
Top country United States 325 victims
Known locations 4 Leak or negotiation infrastructure tracked

Overview

Dragonforce is tracked by Breach House as a ransomware group with 717 published victims.

United States is currently the most targeted country in this dataset.

4 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (4)

    Label Type Availability Links
    Leak location 1 Onion service Up checked 29m ago z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion
    Leak location 2 Onion service Up checked 29m ago 3pktcrcbmssvrnwe5skburdwe2h3v6ibdnn5kbjqihsg6eu6s6b7ryqd.onion
    Leak location 4 Onion service Down checked 29m ago dragongoztkdfmnd7jkchznd3fvkpdmeh4vhbt6p3usrlsoy5dw2bhyd.onion
    Leak location 3 Onion service Down checked 29m ago dragonforxxbp3awc7mzs5dkswrua3znqyx5roefmi4smjrsdi22xwqd.onion

    Top Activity Sectors (17)

    Victims (717)

    Search, filter and paginate the victim timeline for Dragonforce. Showing 101–200 of 717.

    Type Target Discovered Country Business Category Intel Link
    Ransomware www.twtci.com Trans World Trading id30513 View details IT
    Ransomware www.twtci.com Trans World Trading id30513 View details Philippines IT
    Ransomware Al - Saidi Factory id30505 View details Saudi Arabia Other
    Ransomware Al - Saidi Factory id30505 View details Saudi Arabia Other
    Ransomware STEP Oiltools id30506 View details Romania Energy
    Ransomware STEP Oiltools id30506 View details Romania Energy
    Ransomware Access Equipment Hire id30499 View details Australia IT
    Ransomware Access Equipment Hire id30499 View details Australia IT
    Ransomware The Schuett Companies id30465 View details United States Healthcare / Pharma
    Ransomware The Schuett Companies id30465 View details United States Healthcare / Pharma
    Ransomware hive360.com id30309 View details United States IT
    Ransomware hive360.com id30309 View details United States IT
    Ransomware amplesurveyor.com id30310 View details United States IT
    Ransomware amplesurveyor.com id30310 View details United States IT
    Ransomware hwaseng id30085 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware hwaseng id30085 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware agroprime id30086 View details Brazil Agriculture / Food
    Ransomware agroprime id30086 View details Brazil Agriculture / Food
    Ransomware stni.co.kr id30087 View details Korea, Republic of Manufacturing / Engineering
    Ransomware stni.co.kr id30087 View details Korea, Republic of Manufacturing / Engineering
    Ransomware vipimaging id30088 View details United States Healthcare / Pharma
    Ransomware vipimaging id30088 View details United States Healthcare / Pharma
    Ransomware medipakpharma.com id30090 View details Pakistan Healthcare / Pharma
    Ransomware medipakpharma.com id30090 View details Pakistan Healthcare / Pharma
    Ransomware Aptora id30047 View details United States IT
    Ransomware Aptora id30047 View details United States IT
    Ransomware bits-pilani.ac.in id30081 View details India Education
    Ransomware mihana-v.com id30082 View details Russian Federation IT
    Ransomware Tecfi SpA id29941 View details Italy IT
    Ransomware Ink id29861 View details United Kingdom Communication / Marketing
    Ransomware Cheoy Lee Shipyards id29822 View details Hong Kong Other
    Ransomware Al Ishrak Contracting id29823 View details United Arab Emirates Other
    Ransomware Corniche Hotel Abu Dhabi id29827 View details United Arab Emirates Hospitality / Food & Beverage / Tourism
    Ransomware A. Liberty Engineering Co. Ltd id29829 View details Hong Kong Manufacturing / Engineering
    Ransomware Al Shafar GRC id29830 View details United Arab Emirates Services
    Ransomware The DRM id29831 View details Bahrain Retail / E-commerce
    Ransomware Areco id29794 View details Sweden IT
    Ransomware Hong Kong Parkview id29802 View details Hong Kong Construction / Real Estate
    Ransomware Astec Valves & Fittings Pvt id29803 View details India Manufacturing / Engineering
    Ransomware Cekok id29804 View details Türkiye Manufacturing / Engineering
    Ransomware Brian Cox id29805 View details United Kingdom Other
    Ransomware Sayre Associates id29726 View details United States Finance / Legal / Insurance
    Ransomware REHA-ACTIV id29647 View details Germany Healthcare / Pharma
    Ransomware Copamex id29590 View details Mexico Manufacturing / Engineering
    Ransomware SETS Solutions id29591 View details Lebanon IT
    Ransomware Synex International Pvt Ltd id29544 View details Sri Lanka Energy
    Ransomware Taos Mountain Casino id29546 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Panorama BPO id29547 View details Philippines Finance / Legal / Insurance
    Ransomware Shoreline Sightseeing id29391 View details United States Construction / Real Estate
    Ransomware Henry Molded Products Likely to Engage tag. id29392 View details United States Public Sector
    Ransomware President Container Group id29461 View details United States Manufacturing / Engineering
    Ransomware ksmart.ca id29466 View details Canada Construction / Real Estate
    Ransomware practicus.co.uk id29467 View details United Kingdom Services
    Ransomware refreshmentsystems.co.uk id29468 View details United Kingdom Other
    Ransomware dunasgroen.nl id29469 View details Netherlands Services
    Ransomware northbridge.com id29470 View details Canada Finance / Legal / Insurance
    Ransomware wsm.co.uk id29471 View details United Kingdom Finance / Legal / Insurance
    Ransomware jcripberger.com id29473 View details Germany Construction / Real Estate
    Ransomware pieralisi.com id29474 View details Italy Other
    Ransomware nemd.com id29475 View details Niger Construction / Real Estate
    Ransomware fabbricausa.com id29476 View details United States Manufacturing / Engineering
    Ransomware erh.co.uk id29477 View details United Kingdom Services
    Ransomware waypointsolutions.com id29478 View details United States Services
    Ransomware profundo.nl id29479 View details Netherlands Other
    Ransomware FWMK Law Offices id29480 View details Israel Finance / Legal / Insurance
    Ransomware Ramos Rheumatology id29481 View details United States Services
    Ransomware hbroch.com id29485 View details Germany Manufacturing / Engineering
    Ransomware duboisag.com id29487 View details Switzerland Agriculture / Food
    Ransomware qlslogistics.com.au id29488 View details Australia Finance / Legal / Insurance
    Ransomware dentonfirm.com id29489 View details United States Finance / Legal / Insurance
    Ransomware Greenway Technologies id29490 View details Germany Construction / Real Estate
    Ransomware Delbrook Capital Advisors id29491 View details United States Finance / Legal / Insurance
    Ransomware WG Neukölln id29492 View details Germany Services
    Ransomware rolser.com id29520 View details Spain Services
    Ransomware epbinsurance.com id29521 View details United States Finance / Legal / Insurance
    Ransomware jakn.com id29522 View details IT
    Ransomware allianceadjustment.com id29523 View details United States Finance / Legal / Insurance
    Ransomware xtr-global.de id29524 View details Germany Services
    Ransomware saver.nl id29525 View details Netherlands Services
    Ransomware vegfresh.com id29526 View details United States Agriculture / Food
    Ransomware ggroupcpas.com id29527 View details United States Finance / Legal / Insurance
    Ransomware businessrecord.com id29528 View details United States Other
    Ransomware sphvalue.com id29529 View details Finance / Legal / Insurance
    Ransomware ennsco.ca id29530 View details Canada Finance / Legal / Insurance
    Ransomware arsenalscaffold.com id29531 View details United Kingdom Construction / Real Estate
    Ransomware Heartland Growers id29335 View details United States Retail / E-commerce
    Ransomware HELIX INTERNATIONAL id29336 View details United Kingdom Healthcare / Pharma
    Ransomware Prologic Construction id29337 View details Canada Education
    Ransomware Le Pain Quotidien US id29310 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Vega id29282 View details Manufacturing / Engineering
    Ransomware ZFG ALTHERM Engineering id29274 View details Austria Manufacturing / Engineering
    Ransomware TAURUS INVESTMENT HOLDINGS id29275 View details Cyprus Finance / Legal / Insurance
    Ransomware Plan id29202 View details United States Telecommunications
    Ransomware Ingelan id29205 View details Spain Construction / Real Estate
    Ransomware AdvancedHEALTH. id29187 View details United States Finance / Legal / Insurance
    Ransomware AdvancedHEALTH id29186 View details United States Finance / Legal / Insurance
    Ransomware LeRoy Surveyors & Engineers id29167 View details United States Construction / Real Estate
    Ransomware Advanced Medical Consultants id29173 View details United States Finance / Legal / Insurance
    Ransomware MicroMarketing id29132 View details Hospitality / Food & Beverage / Tourism
    Ransomware Pamil Modulsystem id29133 View details Sweden Construction / Real Estate