DragonForce
Runs a “cartel” affiliate model; linked to the 2025 wave of UK retail attacks.
Claimed victims
318
Top region
US
Top sector
Manufacturing
Suspected origin
Unattributed
Latest claimed victims
Victims as claimed by the group on its leak site and tracked in our graph — claims are not independently verified, and listing here is not confirmation a breach occurred.
| Date | Organisation (claimed) | Sector | Country |
|---|---|---|---|
| 2026-09-24 | winfashion | Retail & E-Commerce | — |
| 2026-09-24 | Arizona Vascular Medical Equipment, Inc | Healthcare | US |
| 2026-09-24 | BMGP Groupe | Other | FR |
| 2026-09-24 | Elite Industech Co., Ltd | Manufacturing | TH |
| 2026-09-24 | HEC Group | Other | TW |
| 2026-09-20 | arsrenacer.com | Other | AR |
| 2026-09-16 | Community Property Management | Other | US |
| 2026-09-16 | Owen Leigh Optometry | Healthcare | GB |
| 2026-09-11 | Medical Department Store | Retail & E-Commerce | US |
| 2026-09-06 | rubbermill.com | Manufacturing | US |
Regions targeted
US 83GB 17DE 10CA 9CN 6AE 5HK 5IN 5
Sectors targeted
Manufacturing 37Professional Services 36Technology 20Healthcare 18Business Services 18Hospitality 10
Track it daily
Ransomware moves every day. So does our paper.
The Probably Fine Daily is our morning threat-intelligence briefing — new victims, new groups, what actually matters, in plain English. Free.
Read today's Daily →Browse the archiveDefender-oriented threat intelligence. Nothing here assists an attack. Attribution and lineage reflect open-source reporting.