SecBoard
Threat Intelligence

Leak Monitor

Was Ransomware- und Erpressergruppen auf ihren eigenen Seiten veröffentlichen — laufend eingesammelt und aufbereitet.

Stand 22.10.2026, 20:32

Behauptung des Angreifers, kein bestätigter Vorfall

Ein Eintrag auf einer Leak-Seite ist eine Veröffentlichung der Täter. Gruppen listen regelmäßig Organisationen, bei denen nie ein Vorfall stattfand, und einzelne Gruppen erfinden ihre Opferlisten vollständig. SecBoard gibt diese Einträge wieder, ohne sie zu bestätigen.

Einträge 24 h

42

Einträge 7 Tage

293

aktive Gruppen (30 T.)

97

Länder (30 T.)

75

dragonforce

29 Einträge insgesamtRaaS

Zeitraum: 11.08.2026 – 17.10.2026

DragonForce is a ransomware-as-a-service (RaaS) group first identified in late 2023. Originally linked to hacktivist activity, the group pivoted to financially motivated operations by early 2024. Since then, it has accelerated into a highly organized cartel-like network, providing customizable payloads to affiliates, a sophisticated affiliate portal, and shared infrastructure for leak sites and campaigns. The group has targeted a wide range of sectors globally, including major UK retailers such as M&S, Harrods, and Co-op, along with organizations in government, logistics, and manufacturing. Its operations are known for strategic branding flexibility, enabling affiliates to operate under their own labels using DragonForce’s backend services.

Veröffentlichungskanäle

  • Leak-Seite · DragonForce | Migration completed · zuletzt nicht erreichbar
  • Chat · DragonForce | Migration completed · zuletzt nicht erreichbar
  • Dateiablage · DragonForce | Leaks · zuletzt nicht erreichbar
  • Dateiablage · zuletzt nicht erreichbar
  • Leak-Seite · zuletzt nicht erreichbar
  • Leak-Seite · DragonForce | Blog · zuletzt nicht erreichbar

Kanäle laut RansomLook. Die Adressen der Leak-Seiten werden bewusst nicht angezeigt — sie führen direkt zu den erbeuteten Daten.

Medienecho

Meldungen, die den Gruppennamen neben einem Fachbegriff nennen. Kein Maß für die Schwere eines Vorfalls und kein Beleg, dass ein bestimmtes Opfer in der Presse stand.

Neueste Einträge

Filter zurücksetzen
dragonforceoakgrovetechUS

Beschreibung der Täter

The company specializes in multi-domain training, unmanned systems & robotics, cyber/space operations, learning/courseware development, staff augmentation, intelligence analysis, and operates a Test & Training Center near Fort Bragg/Hoffman, NC. It primarily serves DoD clients including USASOC and 1st Special Forces Command. Corporate email archive of CEO and executive management (12 PST files, 35.14 GB) — forwarded credentials, NDAs, negotiations with the DoD/FBI and other companies. Deltek GCS payroll module: banking details of all vendors and contractors. Accounting system backup. Company QuickBooks files — OGT financial database: bank accounts, employee SSNs, administrator password. Contracts, personal data (PII), SSNs and much more.

Herkunft

dragonforceLane EquipmentUS

Beschreibung der Täter

Lane Equipment Company has been a trusted food service partner in Texas since 1966, specializing in the sales, leasing, repairs, and parts for commercial kitchen equipment. They offer a wide range of products including soft serve machines, frozen beverage machines, ice machines, and refrigeration solutions. With four locations in Houston, San Antonio, Austin, and the Rio Grande Valley, they cater to restaurant professionals and commercial kitchen needs. Their services also include maintenance and parts support, ensuring comprehensive solutions for their clients.

Herkunft

dragonforceCanadian Mennonite University (CMU)CA

Beschreibung der Täter

Canadian Mennonite University (CMU) is a Christian institution in Winnipeg, Manitoba, offering undergraduate degrees in various fields such as arts, business, music, and sciences, along with three graduate degree programs. The university focuses on a small community environment that fosters academic, social, and spiritual growth, welcoming students from diverse backgrounds and beliefs. CMU emphasizes preparing students as skilled problem solvers and leaders committed to positive change in their communities and beyond. It offers financial aid and supports approximately 50% of its students through scholarships and bursaries

Herkunft

dragonforceTQC S.A.PE

Beschreibung der Täter

(A release of 750 GB of data, compressed into archives for convenience.) TQC Tecnología Química Comercio S. A. specializes in providing high-quality solutions for the agricultural, veterinary, and environmental health sectors, promoting sustainable agriculture. The company aims to support the development and well-being of these sectors by offering a wide range of products tailored to their needs. With a commitment to excellence, TQC seeks to be a leading provider in Peru and other markets in South America. They work closely with farmers to exceed expectations and contribute to community growth.

Herkunft

dragonforceTEXMA International Co., LtdTW

Beschreibung der Täter

TEXMA International Co., Ltd. is a leading Taiwanese apparel manufacturer specializing in high-quality women's woven apparel, activewear, and sportswear. Founde...

Herkunft

dragonforceRÉSO—

Beschreibung der Täter

Réso specializes in secondary works, offering a wide range of products including ceilings, partitions, floors, technical floors, and facades. They provide modul...

Herkunft

dragonforcePetrosul Distribuidora, Transportadora e Comércio de Combustíveis Ltda.BR
energie

Beschreibung der Täter

Petrosul is a Brazilian company established in 1994, specializing in fuel storage terminal operations since 2015. The company offers state-of-the-art infrastructure, real-time control, and efficient management to ensure quality service. Its primary clients include businesses in need of reliable fuel storage solutions. Petrosul operates terminals in Sorocaba, Paulínia, and Senador Canedo.

Herkunft

dragonforceRÉSOFR

Beschreibung der Täter

Réso specializes in secondary works, offering a wide range of products including ceilings, partitions, floors, technical floors, and facades. They provide modular and dry partitions, acoustic products, and various accessories, ensuring a comprehensive solution for construction needs. With numerous agencies across France and a team of specialists trained in the latest innovations, Réso serves a diverse clientele with thousands of available products. Their commitment to quality and service is reflected in their partnerships and significant projects. 676 GB of confidential information about their customers, partners, employees were stolen. The entire network was locked including nearly 8TB of Veeam backups. The company has failed to reach for an agreement.

Herkunft

dragonforcewinfashion—

Beschreibung der Täter

══════════════════════════ ══════════════════════════ ══════════════════════════ WINFASHION TECHNOLOGIES DUMP: DATA LEAK ANALYSIS OF A B2B ERP PLATFORM FOR THE...

Herkunft

dragonforceArizona Vascular Medical Equipment, IncUS
healthcare

Beschreibung der Täter

Arizona Vascular Medical Equipment, Inc. is a trusted provider of specialized medical devices, focusing primarily on compression therapy solutions and vascular ...

Herkunft

dragonforceBMGP GroupeFR

Beschreibung der Täter

BMGP Groupe (Polyresine) is an established French manufacturer specializing in the formulation, production, and distribution of synthetic resins and high-perfor...

Herkunft

dragonforceElite Industech Co., LtdTW

Beschreibung der Täter

Elite Industech Co., Ltd. (established in 2003) is a certified Class-A waste treatment plant based in Kaohsiung, Taiwan. The company operates within the circula...

Herkunft

dragonforceHEC GroupTW

Beschreibung der Täter

On August 30, HEC Group issued an official statement addressed to shareholders of TPE:3032 and other stakeholders, announcing that the company had been the targ...

Herkunft

dragonforcearsrenacer.com—

Beschreibung der Täter

ARS RENACER, S.A. DUMP: ANALYSIS OF A HEALTH INSURANCE COMPANY LEAK ═══════════════════════════════════════════════════ ARS Renacer, S.A. (Dominican Republic...

Herkunft

dragonforceCommunity Property ManagementUS

Beschreibung der Täter

full data 200 GB+ We have been in business since 1978 as a management firm specializing in the management of common interest developments including condominiu...

Herkunft

dragonforceOwen Leigh OptometryGB
healthcare

Beschreibung der Täter

Full DATA 400 GB+ The brain uses the eyes to gather information about our surroundings. The brain cannot process all our view so it must first decide what to l...

Herkunft

dragonforceMedical Department StoreUS
healthcare

Beschreibung der Täter

Medical Department Store in united state

Herkunft

dragonforceHomewood SalesUS

Beschreibung der Täter

Homewood Sales Corporation specializes in equipment life extension solutions, offering a wide range of products including automatic voltage regulators, control ...

Herkunft

dragonforceNorwood Law FirmUS

Beschreibung der Täter

Norwood Law is a Tulsa-based legal firm that specializes in personal injury law, criminal defense, business law, and family law. Founded by attorney Joe Norwood...

Herkunft

dragonforcerubbermill.comUS

Beschreibung der Täter

═════════════════ ═════════════════ ═════════════════ RUBBERMILL, INC. DUMP: BREAKDOWN OF AN OEM MANUFACTURER LEAK ═════════════════ ═════════════════ ═══════...

Herkunft

dragonforceCriba—

Beschreibung der Täter

(release includes data on Argentina, Uruguay, and other countries, as well as financial documents and client documentation, including a vast amount of informati...

Herkunft

dragonforceBrookview Financial—
finanzen

Beschreibung der Täter

(data of many thousands of customers, including credit reports, SSNs, addresses, etc.) Brookview Financial is a boutique private lender specializing in quick-cl...

Herkunft

dragonforceWozair—

Beschreibung der Täter

Wozair specializes in the design, manufacture, and installation of heavy-duty heating, ventilating, and air conditioning (HVAC) products for various sectors inc...

Herkunft

dragonforceFrato—

Beschreibung der Täter

(release includes data for the entire group of companies across all countries of operation, financial documentation, shareholder information, personal data of e...

Herkunft

dragonforceHogan Omidi P.C.—

Beschreibung der Täter

Hogan Omidi, P.C. is a boutique law firm specializing in family law, including divorce, child custody, and property division, with a focus on high-asset cases. ...

Herkunft

dragonforceR & D Machine and Engineering—

Beschreibung der Täter

&D Machine and Engineering, LLC specializes in CNC machining of precision metal components primarily for the aerospace, defense, and space industries. The compa...

Herkunft

dragonforceVermont XCenterUS

Beschreibung der Täter

A Vermont coloca seus clientes estrategicamente no Centro das Decisões, pois entende que o cliente deve estar no Centro das Atenções. Com isso estabelecido, a c...

Herkunft

dragonforceGB Group S.A—

Beschreibung der Täter

GB Group is one of Haiti’s largest private industrial and trading conglomerates. Headquartered in Port-au-Prince, it operates across nine core industries includ...

Herkunft

dragonforceQPC Global—

Beschreibung der Täter

Quest Personal Care Global Ltd is a global company specializing in affordable beauty and personal care products, with over 30 years of experience and a presence...

Herkunft

Land und Branche liefern Ransomware.live und ThreatCluster (dort nur für die selbst erhobenen Einträge); sonst werden sie aus dem Eintragstext abgeleitet. Belegt bei 61 % der Einträge — die übrigen erscheinen ohne Land.

Quellen sind die Aggregatoren RansomLook, ThreatCluster und Ransomware.live (von ThreatCluster nur die selbst erhobenen Einträge). Melden mehrere dasselbe Opfer, steht es einmal da — mehrere Quellen heißt: mehrere haben dieselbe Behauptung gelesen, nicht: der Vorfall ist bestätigt. Die Zuordnung zur Gruppe stammt aus der Quelle, nicht aus einer eigenen Attribution durch SecBoard. Es werden ausschließlich Metadaten verarbeitet — keine erbeuteten Daten.